SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3234-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-16853 CVE-2025-31335 Upstream summary: The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1659-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7383 (see also SUSE bugzilla) Related CVEs: CVE-2026-4631 CVE-2026-26996 CVE-2026-25547 CVE-2025-13465 CVE-2024-6126 Upstream summary: Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0355-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1484 CVE-2026-1489 CVE-2025-13601 CVE-2025-14087 CVE-2025-6052 CVE-2024-52533 CVE-2023-32643 CVE-2019-13012  +12 more Upstream summary: A flaw was found in the GLib Base64 encoding routine when processing very […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:16484 (see also SUSE bugzilla) Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048 CVE-2026-2271 CVE-2026-2272  +12 more Upstream summary: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows […]

🔴 Critical   ⏱ 15–90 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5869 CVE-2018-1115 CVE-2018-16850 CVE-2026-6473 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6479  +12 more Upstream summary: A flaw was found in PostgreSQL that allows authenticated database users to execute […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3027-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36033 Upstream summary: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-7524 CVE-2021-3565 CVE-2024-29038 CVE-2024-29039 Upstream summary: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:740-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-18074 CVE-2023-32681 CVE-2024-35195 CVE-2024-47081 CVE-2014-1829 CVE-2014-1830 Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon […]