🟡 Medium ⏱ 10–30 min Last verified: 30 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2063 Upstream summary: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟠 High ⏱ 15–60 min Last verified: 29 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-31924 CVE-2025-23013 CVE-2019-12209 CVE-2019-12210 Upstream summary: Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could […]
🟡 Medium ⏱ 10–30 min Last verified: 29 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8365 (see also SUSE bugzilla) Related CVEs: CVE-2024-3651 Upstream summary: A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's […]
🟡 Medium ⏱ 10–30 min Last verified: 29 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1211-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-4040 Upstream summary: snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing […]
🟡 Medium ⏱ 10–30 min Last verified: 29 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:015 (see also SUSE bugzilla) Related CVEs: CVE-2010-0407 CVE-2010-4531 CVE-2016-10109 Upstream summary: Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite […]
🟠 High ⏱ 15–60 min Last verified: 29 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0858-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69223 CVE-2025-69227 CVE-2025-69228 CVE-2025-69229 CVE-2025-69224 CVE-2025-69225 CVE-2025-69226 CVE-2020-8927 +1 more Upstream summary: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 28 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-22011 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry […]
🟠 High ⏱ 15–60 min Last verified: 28 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:2686-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2019-20044 CVE-2021-45444 CVE-2018-1083 CVE-2018-1071 Upstream summary: An issue was discovered in zsh before 5.6. The beginning of a #! script file was […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1664 CVE-2025-6297 CVE-2015-0840 Upstream summary: Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal […]
🟠 High ⏱ 15–60 min Last verified: 27 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-7435 CVE-2017-9271 CVE-2019-18900 Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in […]
