🟡 Medium ⏱ 10–30 min Last verified: 16 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7350 (see also SUSE bugzilla) Related CVEs: CVE-2026-21712 CVE-2025-59464 Upstream summary: A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized […]
🟠 High ⏱ 15–60 min Last verified: 16 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1784-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40176 CVE-2026-40261 CVE-2024-35241 CVE-2024-35242 CVE-2024-24821 CVE-2022-24828 CVE-2023-43655 CVE-2025-67746 Upstream summary: Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 […]
🟠 High ⏱ 15–60 min Last verified: 16 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0145-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), […]
🟠 High ⏱ 15–60 min Last verified: 16 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1068-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-3172 Upstream summary: Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other […]
🔴 Critical ⏱ 15–90 min Last verified: 16 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to […]
🟡 Medium ⏱ 10–30 min Last verified: 15 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2007:044 (see also SUSE bugzilla) Related CVEs: CVE-2007-2756 CVE-2016-10166 CVE-2016-10168 CVE-2016-5116 CVE-2016-5766 CVE-2016-6128 CVE-2016-6132 CVE-2016-6207 +12 more Upstream summary: The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial […]
🔴 Critical ⏱ 15–90 min Last verified: 15 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0010-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7512 CVE-2017-15118 CVE-2026-3195 CVE-2025-11234 CVE-2008-4539 CVE-2014-0145 CVE-2015-3209 CVE-2015-6855 +12 more Upstream summary: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest […]
🟠 High ⏱ 15–60 min Last verified: 13 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2919-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-22046 CVE-2022-3964 CVE-2023-50010 CVE-2023-51793 CVE-2023-51794 CVE-2024-31578 CVE-2024-7055 CVE-2025-7700 +12 more Upstream summary: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory […]
🟠 High ⏱ 15–60 min Last verified: 12 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3350-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18926 CVE-2012-0037 CVE-2024-57822 CVE-2024-57823 Upstream summary: raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading […]
🟠 High ⏱ 15–60 min Last verified: 12 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:1834-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27347 CVE-2018-19387 CVE-2022-47016 Upstream summary: In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by […]
