🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2020-17446 Upstream summary: asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:17428 (see also SUSE bugzilla) Related CVEs: CVE-2025-41244 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2022-31676 CVE-2025-22247 CVE-2023-20867 CVE-2015-5191 Upstream summary: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local […]
🔴 Critical ⏱ 15–90 min Last verified: 1 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1283 CVE-2017-6004 CVE-2014-8964 CVE-2015-3217 CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 +1 more Upstream summary: The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and […]
🟡 Medium ⏱ 10–30 min Last verified: 31 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1097-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1983 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟠 High ⏱ 15–60 min Last verified: 31 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-15888 CVE-2020-24342 CVE-2020-24369 CVE-2021-44647 CVE-2022-33099 CVE-2020-15945 CVE-2021-43519 Upstream summary: Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based […]
🟡 Medium ⏱ 10–30 min Last verified: 31 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8037 (see also SUSE bugzilla) Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with […]
🟠 High ⏱ 15–60 min Last verified: 31 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:2387-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14822 Upstream summary: A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to […]
🔴 Critical ⏱ 15–90 min Last verified: 30 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2007:015 (see also SUSE bugzilla) Related CVEs: CVE-2007-3641 CVE-2022-26280 CVE-2024-20696 CVE-2024-26256 CVE-2006-5680 CVE-2007-3644 CVE-2007-3645 CVE-2015-2304 +12 more Upstream summary: archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a […]
🟡 Medium ⏱ 10–30 min Last verified: 29 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2017-7555 CVE-2025-2588 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]
🟠 High ⏱ 15–60 min Last verified: 29 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4090-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-43641 Upstream summary: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. […]
