🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2026:20990-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25727 CVE-2021-25900 CVE-2023-38633 CVE-2011-3146 CVE-2013-1881 CVE-2019-20446 CVE-2024-43806 CVE-2017-11464 Upstream summary: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:411-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26720 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2006-5461 CVE-2006-6870 CVE-2007-3372 +12 more Upstream summary: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via […]
🔴 Critical ⏱ 15–90 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:2706 (see also SUSE bugzilla) Related CVEs: CVE-2025-61732 CVE-2025-61731 CVE-2025-68119 CVE-2025-68121 CVE-2025-61727 CVE-2025-61729 CVE-2024-45340 CVE-2025-22865 +12 more Upstream summary: A discrepancy between how Go and C/C++ comments were parsed allowed for code […]
🟡 Medium ⏱ 10–30 min Last verified: 1 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4326 Upstream summary: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended […]
🟠 High ⏱ 15–60 min Last verified: 1 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1555-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-20884 CVE-2026-20889 CVE-2026-5342 Upstream summary: An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead […]
🟠 High ⏱ 15–60 min Last verified: 1 April 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10950 (see also SUSE bugzilla) Related CVEs: CVE-2026-4224 CVE-2026-1299 CVE-2026-0672 CVE-2023-40217 CVE-2023-24329 CVE-2021-28861 CVE-2015-20107 CVE-2017-1000158 +12 more Upstream summary: When an Expat parser with a registered ElementDeclHandler parses an inline document type […]
🔴 Critical ⏱ 15–90 min Last verified: 1 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-0011 CVE-2020-26117 CVE-2026-34352 CVE-2014-8240 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 +2 more Upstream summary: Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before […]
🟡 Medium ⏱ 10–30 min Last verified: 31 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1283-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-6272 Upstream summary: Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers […]
🟠 High ⏱ 15–60 min Last verified: 31 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3333-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-16125 CVE-2025-6018 CVE-2011-1709 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2015-7496 CVE-2020-27837 Upstream summary: gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice […]
🟠 High ⏱ 15–60 min Last verified: 31 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0901-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVE-2022-37032 CVE-2022-37035 CVE-2022-42917 +12 more Upstream summary: Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on […]
