SLES 16

🔴 Critical   ⏱ 15–90 min  Last verified: 7 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4215-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37026 CVE-2026-21620 CVE-2026-28808 CVE-2026-32144 CVE-2020-25623 CVE-2020-35733 CVE-2026-23941 CVE-2026-23942  +5 more Upstream summary: In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7436 CVE-2017-9269 Upstream summary: In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0489-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8597 CVE-2014-3158 CVE-2015-3310 CVE-2022-4603 Upstream summary: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1744-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-71176 Upstream summary: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:0543-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users […]

🟠 High   ⏱ 15–60 min  Last verified: 5 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:3386-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19191 CVE-2017-16852 Upstream summary: Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by […]

🟠 High   ⏱ 15–60 min  Last verified: 5 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2022-47630 CVE-2022-23960 Upstream summary: Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 5 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1194-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33186 Upstream summary: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-28407 CVE-2022-23645 Upstream summary: In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink […]

🟠 High   ⏱ 15–60 min  Last verified: 4 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2719 (see also SUSE bugzilla) Related CVEs: CVE-2026-24882 CVE-2026-24883 CVE-2025-68973 CVE-2006-0455 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2020-25125  +9 more Upstream summary: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling […]