🟡 Medium ⏱ 10–30 min Last verified: 28 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0233-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22702 Upstream summary: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers […]
🟠 High ⏱ 15–60 min Last verified: 28 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:2719 (see also SUSE bugzilla) Related CVEs: CVE-2026-24882 CVE-2025-68973 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2020-25125 CVE-2022-34903 CVE-2019-14855 +6 more Upstream summary: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2673 Upstream summary: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3924-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46316 Upstream summary: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1895-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4547 CVE-2017-7529 CVE-2021-23017 CVE-2022-41741 CVE-2022-41742 CVE-2024-24989 CVE-2024-24990 CVE-2011-4315 +12 more Upstream summary: nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-6003 CVE-2025-13151 CVE-2014-3467 CVE-2014-3468 CVE-2014-3469 CVE-2015-2806 CVE-2016-4008 CVE-2018-1000654 +1 more Upstream summary: An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7342 (see also SUSE bugzilla) Related CVEs: CVE-2026-3608 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 Upstream summary: Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or […]
🟡 Medium ⏱ 10–30 min Last verified: 26 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0226-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-23650 CVE-2024-2365 Upstream summary: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit […]
🟡 Medium ⏱ 10–30 min Last verified: 26 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0849-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27205 Upstream summary: Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10758 (see also SUSE bugzilla) Related CVEs: CVE-2026-35535 CVE-2025-32462 CVE-2025-32463 CVE-2023-42465 CVE-2023-22809 CVE-2022-43995 CVE-2012-2337 CVE-2017-1000367 +12 more Upstream summary: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or […]
