SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 26 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14769-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3246 CVE-2018-13139 CVE-2018-19662 CVE-2022-33065 CVE-2024-50612 CVE-2007-4974 CVE-2009-0186 CVE-2011-2696  +12 more Upstream summary: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1862-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2300-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-8367 CVE-2026-21413 CVE-2026-20911 CVE-2026-24660 CVE-2018-10528 CVE-2018-10529 CVE-2025-43962 CVE-2025-43964  +12 more Upstream summary: The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors […]

🟠 High   ⏱ 15–60 min  Last verified: 25 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-14813 CVE-2026-3505 CVE-2026-5598 CVE-2015-7940 CVE-2016-1000338 CVE-2019-17359 CVE-2020-28052 CVE-2023-33201  +12 more Upstream summary: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2907-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-0425 CVE-2021-42013 CVE-2021-44790 CVE-2006-20001 CVE-2006-3747 CVE-2009-1955 CVE-2009-2699 CVE-2011-3192  +12 more Upstream summary: modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1440-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1135 Upstream summary: Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1819-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41205 Upstream summary: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20590-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-8746 Upstream summary: A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:1829-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-52323 Upstream summary: PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5008 Upstream summary: Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows […]