SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 31 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2387-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14822 Upstream summary: A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 30 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2007:015 (see also SUSE bugzilla) Related CVEs: CVE-2007-3641 CVE-2022-26280 CVE-2024-20696 CVE-2024-26256 CVE-2006-5680 CVE-2007-3644 CVE-2007-3645 CVE-2015-2304  +12 more Upstream summary: archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2017-7555 CVE-2025-2588 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]

🟠 High   ⏱ 15–60 min  Last verified: 29 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4090-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-43641 Upstream summary: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-37463 Upstream summary: cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3030-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37464 Upstream summary: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2021:1414-1 (see also SUSE bugzilla) Related CVEs: CVE-2008-0171 Upstream summary: regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service […]

🟠 High   ⏱ 15–60 min  Last verified: 26 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-45748 CVE-2024-40724 CVE-2024-45679 CVE-2022-38528 Upstream summary: An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 26 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03520-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-57052 CVE-2023-50471 CVE-2023-50472 CVE-2024-31755 CVE-2023-26819 Upstream summary: cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass […]

🔴 Critical   ⏱ 15–90 min  Last verified: 26 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3781 CVE-2013-5653 CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 CVE-2016-7979 CVE-2019-3835 CVE-2019-3838  +12 more Upstream summary: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in […]