🟠 High ⏱ 15–60 min Last verified: 13 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3161-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8432 CVE-2018-18439 CVE-2018-18440 CVE-2020-10648 CVE-2024-57256 CVE-2024-57258 Upstream summary: In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double […]
🔴 Critical ⏱ 15–90 min Last verified: 13 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-41945 Upstream summary: Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 12 March 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:1842-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3560 CVE-2021-4034 CVE-2026-4897 CVE-2025-7519 CVE-2010-0750 CVE-2011-1485 CVE-2015-3255 CVE-2015-3256 +6 more Upstream summary: It was found that polkit could be tricked into bypassing the credential checks […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1985 Upstream summary: Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:263-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13435 CVE-2020-13871 CVE-2022-46908 CVE-2025-6965 CVE-2025-70873 CVE-2025-7709 CVE-2019-16168 CVE-2020-13434 +11 more Upstream summary: SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. Table of […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1861-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33811 CVE-2026-33814 CVE-2026-39820 CVE-2026-39836 CVE-2026-42499 CVE-2026-42501 CVE-2026-27140 CVE-2026-27143 +12 more Upstream summary: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-28021 CVE-2021-42716 CVE-2021-42715 Upstream summary: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3857-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32839 CVE-2023-30608 CVE-2024-2430 Upstream summary: sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03087-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of […]
🟠 High ⏱ 15–60 min Last verified: 10 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21425-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-39373 CVE-2022-3102 CVE-2024-28102 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by […]
