SLES 16

🟡 Medium   ⏱ 10–30 min  Last verified: 28 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-22011 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry […]

🟠 High   ⏱ 15–60 min  Last verified: 28 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2686-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2019-20044 CVE-2021-45444 CVE-2018-1083 CVE-2018-1071 Upstream summary: An issue was discovered in zsh before 5.6. The beginning of a #! script file was […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1664 CVE-2025-6297 CVE-2015-0840 Upstream summary: Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal […]

🟠 High   ⏱ 15–60 min  Last verified: 27 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-7435 CVE-2017-9271 CVE-2019-18900 Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14536-1 Related CVEs: CVE-2014-4966 CVE-2014-4967 CVE-2016-9587 CVE-2017-7466 CVE-2018-10875 CVE-2018-16837 CVE-2019-14904 CVE-2019-14905  +12 more Upstream summary: Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent […]

🟠 High   ⏱ 15–60 min  Last verified: 25 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2024:1448-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25657 Upstream summary: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:12876 (see also SUSE bugzilla) Related CVEs: CVE-2022-29458 Upstream summary: ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9423 (see also SUSE bugzilla) Related CVEs: CVE-2023-29483 Upstream summary: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an […]

🟠 High   ⏱ 15–60 min  Last verified: 25 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:1-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-28374 Upstream summary: In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2692-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33461 CVE-2025-0633 Upstream summary: iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. Table of […]