🟠 High ⏱ 15–60 min Last verified: 23 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:1641-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-3630 CVE-2019-15142 CVE-2019-15143 +6 more Upstream summary: A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:0810-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-5732 CVE-2019-6470 CVE-2021-25217 CVE-2009-1892 CVE-2010-2156 CVE-2010-3611 CVE-2010-3616 CVE-2011-0413 +12 more Upstream summary: Failure to properly bounds-check a buffer used for processing DHCP options allows a […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory GHSA-f2g3-hh2r-cwgc (see also SUSE bugzilla) Related CVEs: CVE-2026-35172 CVE-2026-34986 CVE-2023-2253 CVE-2026-33540 CVE-2017-11468 Upstream summary: Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0541 CVE-2015-3202 CVE-2009-3297 Upstream summary: fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:602-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26112 Upstream summary: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** […]
🟠 High ⏱ 15–60 min Last verified: 21 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14389-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47191 CVE-2013-7322 Upstream summary: pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:019 (see also SUSE bugzilla) Related CVEs: CVE-2010-2947 Upstream summary: Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0220-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22701 CVE-2025-68146 Upstream summary: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0886-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 Upstream summary: The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a […]
🟠 High ⏱ 15–60 min Last verified: 19 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:167-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3520 CVE-2019-17543 Upstream summary: There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able […]
