🟠 High ⏱ 15–60 min Last verified: 17 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3179-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-19726 CVE-2021-20294 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2014-9939 +12 more Upstream summary: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol […]
🟠 High ⏱ 15–60 min Last verified: 16 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2016-6581 Upstream summary: A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically […]
🟡 Medium ⏱ 10–30 min Last verified: 16 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0870-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0107 Upstream summary: The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 16 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-2139 CVE-2015-6360 Upstream summary: Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) […]
🟡 Medium ⏱ 10–30 min Last verified: 16 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:10-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12290 CVE-2019-18224 CVE-2015-2059 CVE-2015-8948 CVE-2016-6262 Upstream summary: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels […]
🟡 Medium ⏱ 10–30 min Last verified: 15 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-8863 CVE-2016-4074 CVE-2023-50246 CVE-2023-50268 CVE-2024-23337 CVE-2024-53427 Upstream summary: Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 15 December 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2019-15161 CVE-2019-15162 CVE-2019-15163 CVE-2019-15164 CVE-2019-15165 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:219-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-28737 CVE-2023-40547 CVE-2024-2312 CVE-2014-3675 CVE-2014-3676 CVE-2014-3677 CVE-2023-40546 CVE-2023-40548 +3 more Upstream summary: There's a possible overflow in handle_image() when shim tries to load and execute […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2022:1093-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2019-13224 CVE-2019-13225 CVE-2019-19012 CVE-2020-26159 Upstream summary: An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:4230-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-48795 Upstream summary: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity […]
