🟠 High ⏱ 15–60 min Last verified: 6 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:13515 (see also SUSE bugzilla) Related CVEs: CVE-2026-33554 Upstream summary: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set […]
🟠 High ⏱ 15–60 min Last verified: 6 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1571-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40706 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 +12 more Upstream summary: In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18342 CVE-2020-14343 Upstream summary: In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-14382 CVE-2021-4122 Upstream summary: A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-32597 CVE-2022-29217 CVE-2017-12880 Upstream summary: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header […]
🔴 Critical ⏱ 15–90 min Last verified: 5 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0117-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-0777 CVE-2026-35385 CVE-2023-38408 CVE-2021-41617 CVE-2008-1483 CVE-2016-10010 CVE-2026-35414 CVE-2025-61984 +12 more Upstream summary: The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1439-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-3451 Upstream summary: The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33503 CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2025-50181 CVE-2024-37891 CVE-2023-45803 CVE-2018-25091 +2 more Upstream summary: An issue was discovered in urllib3 before 1.26.5. When provided with a URL […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1712-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40244 CVE-2026-40250 CVE-2021-20298 CVE-2021-3479 CVE-2021-3605 CVE-2021-20296 CVE-2021-20299 CVE-2021-20300 +12 more Upstream summary: OpenEXR provides the specification and reference implementation of the EXR file format, an […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:0002 (see also SUSE bugzilla) Related CVEs: CVE-2025-45582 CVE-2001-1267 CVE-2002-0399 CVE-2005-1918 CVE-2006-0300 CVE-2006-6097 CVE-2010-0624 CVE-2016-6321 +5 more Upstream summary: GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR […]
