🟠 High ⏱ 15–60 min Last verified: 21 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1170-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2474 Upstream summary: Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2011:007 Related CVEs: CVE-2011-0460 Upstream summary: The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7183 CVE-2014-1545 Upstream summary: Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3845-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61962 CVE-2021-36386 CVE-2021-39272 CVE-2009-2666 CVE-2010-1167 CVE-2011-1947 CVE-2012-3482 Upstream summary: In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:0697 (see also SUSE bugzilla) Related CVEs: CVE-2025-68973 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2022-34903 CVE-2014-4617 CVE-2015-1606 CVE-2015-1607 +3 more Upstream summary: In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index […]
🟠 High ⏱ 15–60 min Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02809-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32650 CVE-2025-58266 CVE-2023-26964 Upstream summary: Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0172-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7488 Upstream summary: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2451 Upstream summary: The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via […]
🟠 High ⏱ 15–60 min Last verified: 19 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56326 CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 CVE-2025-27516 CVE-2014-0012 Upstream summary: Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed […]
🟠 High ⏱ 15–60 min Last verified: 19 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:7430 (see also SUSE bugzilla) Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows […]
