SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15033-1 Related CVEs: CVE-2017-9232 CVE-2020-36846 CVE-2022-45157 CVE-2023-0109 CVE-2023-42818 CVE-2024-22036 CVE-2024-28892 CVE-2024-39223  +12 more Upstream summary: Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting […]

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1842 (see also SUSE bugzilla) Related CVEs: CVE-2025-55130 CVE-2025-55131 CVE-2025-59465 CVE-2025-23083 CVE-2025-23166 CVE-2025-59466 CVE-2026-21637 CVE-2026-22036  +11 more Upstream summary: A flaw in Node.js's Permissions model allows attackers to bypass `–allow-fs-read` and `–allow-fs-write` […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2276-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24795 CVE-2023-33460 Upstream summary: yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:14510-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20919 CVE-2020-14392 CVE-2020-14393 CVE-2014-10401 CVE-2014-10402 Upstream summary: An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1436-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33936 Upstream summary: The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03052-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-20053 CVE-2025-20109 CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-26403 CVE-2025-32086 CVE-2024-21820  +12 more Upstream summary: Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:2008-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41054 Upstream summary: In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:12423 (see also SUSE bugzilla) Related CVEs: CVE-2026-4878 CVE-2023-2603 CVE-2023-2602 Upstream summary: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0118-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12084 CVE-2026-29518 CVE-2026-41035 CVE-2026-43618 CVE-2024-12087 CVE-2022-29154 CVE-2020-14387 CVE-2026-43617  +12 more Upstream summary: A heap-based buffer overflow flaw was found in the rsync daemon. This issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1603-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-12648 CVE-2018-7728 CVE-2018-7729 CVE-2018-7730 CVE-2018-7731 Upstream summary: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference. Table of contents Symptom & […]