SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2064-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1999 CVE-2023-4863 CVE-2016-9085 CVE-2016-8888 Upstream summary: There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0405-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3534 CVE-2021-45940 CVE-2021-45941 CVE-2022-3533 CVE-2022-3606 Upstream summary: A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1641-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27856 CVE-2025-59032 CVE-2026-24031 CVE-2026-27858 CVE-2017-14461 CVE-2019-11500 CVE-2019-3814 CVE-2020-10957  +12 more Upstream summary: Doveadm credentials are verified using direct comparison which is susceptible to timing oracle […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0368-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69277 CVE-2025-15444 Upstream summary: libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an […]

🔴 Critical   ⏱ 15–90 min  Last verified: 19 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2006:020 (see also SUSE bugzilla) Related CVEs: CVE-2006-1615 CVE-2010-1205 CVE-2023-20032 CVE-2005-3303 CVE-2006-1614 CVE-2006-4182 CVE-2007-0897 CVE-2007-1997  +12 more Upstream summary: Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1162-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-4651 CVE-2015-1196 CVE-2016-10713 CVE-2019-13636 CVE-2021-45261 CVE-2018-6951 CVE-2018-6952 CVE-2019-20633 Upstream summary: Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37865 CVE-2022-46751 CVE-2022-37866 Upstream summary: With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2007:005 (see also SUSE bugzilla) Related CVEs: CVE-2006-6772 CVE-2010-2074 CVE-2012-4929 CVE-2016-9434 CVE-2016-9435 CVE-2016-9436 CVE-2016-9437 CVE-2016-9438  +12 more Upstream summary: Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, […]

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2026:20990-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31979 CVE-2025-59044 CVE-2025-54882 CVE-2026-34397 CVE-2024-11738 CVE-2025-53013 Upstream summary: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, […]