SLES

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:741-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12825 CVE-2010-4000 CVE-2017-8288 CVE-2019-3820 CVE-2023-43090 CVE-2024-36472 CVE-2020-17489 Upstream summary: libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0125 (see also SUSE bugzilla) Related CVEs: CVE-2025-66293 CVE-2014-9495 CVE-2015-0973 CVE-2026-22695 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2014-0333 Upstream summary: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1511-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-34078 CVE-2024-42472 CVE-2024-32462 CVE-2023-28100 CVE-2021-43860 CVE-2019-8308 CVE-2021-41133 CVE-2017-5226  +9 more Upstream summary: Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0235-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-60876 CVE-2026-26157 CVE-2026-26158 CVE-2022-48174 CVE-2016-2147 CVE-2018-1000500 CVE-2018-1000517 CVE-2021-28831  +12 more Upstream summary: BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control […]

🔴 Critical   ⏱ 15–90 min  Last verified: 3 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2010:032 (see also SUSE bugzilla) Related CVEs: CVE-2010-1205 CVE-2026-33416 CVE-2026-25646 CVE-2011-3026 CVE-2011-3045 CVE-2026-34757 CVE-2025-64505 CVE-2011-2501  +5 more Upstream summary: Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1989-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Upstream summary: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2211-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2201 CVE-2020-17541 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813 CVE-2018-19644 CVE-2020-13790  +4 more Upstream summary: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due […]