🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0928-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-4038 CVE-2014-4039 Upstream summary: ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2025:15900 (see also SUSE bugzilla) Related CVEs: CVE-2025-9566 CVE-2019-10152 CVE-2021-20206 CVE-2022-1227 CVE-2022-21698 CVE-2024-11218 CVE-2024-1753 CVE-2024-3727 +12 more Upstream summary: There's a vulnerability in podman where an attacker may use the kube play […]
🟢 Low ⏱ 5–15 min Last verified: 8 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8830 (see also SUSE bugzilla) Related CVEs: CVE-2024-2313 Upstream summary: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:0026-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2018-1000035 CVE-2005-2475 CVE-2014-9913 CVE-2016-9844 +5 more Upstream summary: Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-67030 Upstream summary: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code Table […]
🟡 Medium ⏱ 10–30 min Last verified: 7 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:3392-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13735 CVE-2017-14608 CVE-2018-19566 CVE-2018-19568 CVE-2018-19655 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624 +3 more Upstream summary: There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:17558 (see also SUSE bugzilla) Related CVEs: CVE-2025-48964 CVE-2025-47268 Upstream summary: ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via […]
🟠 High ⏱ 15–60 min Last verified: 6 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:6-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8631 CVE-2020-8632 CVE-2024-6174 CVE-2019-0816 CVE-2021-3429 CVE-2022-2084 CVE-2023-1786 CVE-2024-11584 Upstream summary: cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-5410 Upstream summary: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) […]
