🟡 Medium ⏱ 10–30 min Last verified: 30 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:858-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5186 Upstream summary: Audit before 2.4.4 in Linux does not sanitize escape characters in filenames. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:3498-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16435 Upstream summary: Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0936-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-3731 Upstream summary: A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21553-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-15536 Upstream summary: A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:245-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29651 CVE-2022-42969 Upstream summary: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1987 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2021:2130-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-5123 CVE-2014-8991 CVE-2015-2296 CVE-2019-20916 CVE-2023-5752 CVE-2026-1703 Upstream summary: The mirroring support (-M, –use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1651-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-4317 Upstream summary: Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:14790 (see also SUSE bugzilla) Related CVEs: CVE-2026-33636 CVE-2025-66293 CVE-2011-2690 CVE-2011-2692 CVE-2026-22695 CVE-2026-22801 CVE-2025-64506 CVE-2025-64720 +11 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0990-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4105 CVE-2023-26604 CVE-2020-1712 CVE-2017-18078 CVE-2018-15688 CVE-2018-16864 CVE-2018-16865 CVE-2018-6954 +12 more Upstream summary: A flaw was found in systemd. The systemd-machined service contains an Improper Access […]
