🔴 Critical ⏱ 15–90 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-45299 Upstream summary: An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14621-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-41816 CVE-2022-28738 CVE-2020-10663 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2020-10933 CVE-2021-28965 +5 more Upstream summary: CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow […]
🔴 Critical ⏱ 15–90 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9063 CVE-2026-32776 CVE-2026-32777 CVE-2025-59375 CVE-2009-2625 CVE-2016-5300 CVE-2017-9233 CVE-2019-15903 +12 more Upstream summary: An integer overflow during the parsing of XML using the Expat library. This […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:19927 (see also SUSE bugzilla) Related CVEs: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2024-21626 CVE-2023-27561 CVE-2021-30465 CVE-2016-8867 CVE-2016-9962 +12 more Upstream summary: runc is a CLI tool for spawning and running containers according to the […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:11371 (see also SUSE bugzilla) Related CVEs: CVE-2026-1519 CVE-2025-40778 CVE-2024-11187 CVE-2024-1737 CVE-2024-1975 CVE-2023-4408 CVE-2023-50387 CVE-2023-50868 +12 more Upstream summary: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted […]
🔴 Critical ⏱ 15–90 min Last verified: 11 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory BLOG-XZ (see also SUSE bugzilla) Related CVEs: CVE-2024-3094 CVE-2022-1271 CVE-2025-31115 Upstream summary: Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:209-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 CVE-2014-0012 CVE-2024-22195 CVE-2024-34064 Upstream summary: In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02788-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-50420 CVE-2025-52886 CVE-2025-32364 CVE-2025-32365 CVE-2024-56378 CVE-2025-11896 CVE-2025-3154 Upstream summary: An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1641-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27856 CVE-2025-59032 CVE-2026-27858 CVE-2020-12673 CVE-2020-12674 CVE-2020-24386 CVE-2017-14461 CVE-2019-11500 +11 more Upstream summary: Doveadm credentials are verified using direct comparison which is susceptible to timing oracle […]
