🟡 Medium ⏱ 10–30 min Last verified: 28 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:2425-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18594 CVE-2018-15173 Upstream summary: nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection […]
🟠 High ⏱ 15–60 min Last verified: 28 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1498-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4046 Upstream summary: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-202410:15282-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5569 Upstream summary: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-6512 Upstream summary: Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2007:007 (see also SUSE bugzilla) Related CVEs: CVE-2006-4250 Upstream summary: Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2319-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22918 CVE-2024-24806 Upstream summary: Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1673-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25289 CVE-2026-42308 CVE-2026-42310 CVE-2021-25287 CVE-2021-25288 CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 +12 more Upstream summary: An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2026-31899 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-30922 CVE-2026-23490 Upstream summary: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1343-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40393 CVE-2019-5068 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 Upstream summary: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount […]
