🟠 High ⏱ 15–60 min Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-27135 CVE-2019-18802 CVE-2020-11080 CVE-2023-35945 CVE-2024-28182 CVE-2018-1000168 CVE-2016-1544 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version […]
🟠 High ⏱ 15–60 min Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:13644 (see also SUSE bugzilla) Related CVEs: CVE-2026-35091 CVE-2026-35092 Upstream summary: A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-6369 CVE-2022-1210 Upstream summary: Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:4898 (see also SUSE bugzilla) Related CVEs: CVE-2025-67873 CVE-2025-68114 Upstream summary: Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03199-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-57804 Upstream summary: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0888-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-8671 CVE-2016-7069 CVE-2024-25581 CVE-2025-30193 CVE-2025-30194 CVE-2025-30187 CVE-2017-7557 CVE-2018-14663 Upstream summary: A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures […]
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:4717 (see also SUSE bugzilla) Related CVEs: CVE-2026-23893 CVE-2026-22791 CVE-2024-0914 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following […]
🟠 High ⏱ 15–60 min Last verified: 12 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21519-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-23437 CVE-2026-31406 CVE-2026-23268 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect late read accesses to the hierarchy We […]
🟡 Medium ⏱ 10–30 min Last verified: 11 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-2199 Upstream summary: Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the […]
🟠 High ⏱ 15–60 min Last verified: 11 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1306-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8779 CVE-2015-7236 Upstream summary: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data […]
