SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0270-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9114 CVE-2016-2779 CVE-2017-2616 CVE-2024-28085 CVE-2025-14104 CVE-2026-3184 CVE-2021-3995 CVE-2021-3996  +4 more Upstream summary: Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0913-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used […]

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-14151 CVE-2017-14152 CVE-2020-27823 CVE-2020-6851 CVE-2020-8112 CVE-2021-3575 CVE-2016-10504 CVE-2016-10505  +12 more Upstream summary: An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The […]

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2012-2240 CVE-2012-2241 CVE-2012-3500 Upstream summary: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3277-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-12627 CVE-2018-1311 CVE-2009-1885 CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 Upstream summary: In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a […]

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1626-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4419 CVE-2013-2124 Upstream summary: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the –remote or –listen option, does not properly check the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0631-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5950 Upstream summary: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) […]

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:20892-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11731 CVE-2019-18197 CVE-2021-30560 CVE-2024-55549 CVE-2025-24855 CVE-2025-7424 CVE-2008-1767 CVE-2016-4738  +6 more Upstream summary: A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-46850 CVE-2025-13086 CVE-2017-7521 CVE-2017-7522 CVE-2022-0547 CVE-2005-3393 CVE-2005-3409 CVE-2006-1629  +9 more Upstream summary: Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:007 Related CVEs: CVE-2011-0460 Upstream summary: The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Table of contents Symptom […]