SLES 12

SLES 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 8 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:4075-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-52316 CVE-2018-8037 CVE-2026-29146 CVE-2026-32990 CVE-2026-34486 CVE-2023-45468 CVE-2025-48989 CVE-2025-66614  +12 more Upstream summary: Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use […]

Read more
SLES 12 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1347-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24476 CVE-2013-7112 CVE-2018-12086 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18227 CVE-2025-13946  +12 more Upstream summary: A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause […]

Read more
SLES 12 — xrdp — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — xrdp — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0404-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68670 CVE-2024-39917 CVE-2020-4044 CVE-2023-42822 CVE-2023-40184 CVE-2022-23468 CVE-2022-23479 CVE-2022-23480  +9 more Upstream summary: xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated […]

Read more
SLES 12 — libraw-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libraw-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01569-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-43962 CVE-2025-43964 Upstream summary: In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values […]

Read more
SLES 12 — sed — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — sed — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1659-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the […]

Read more
SLES 12 — uuidd — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — uuidd — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1106-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28085 CVE-2014-9114 CVE-2016-2779 CVE-2017-2616 CVE-2018-7738 CVE-2026-3184 CVE-2025-14104 CVE-2021-37600  +3 more Upstream summary: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape […]

Read more
SLES 12 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10110 (see also SUSE bugzilla) Related CVEs: CVE-2025-32462 CVE-2023-42465 CVE-2023-22809 CVE-2022-43995 CVE-2019-18634 CVE-2021-23240 CVE-2021-3156 CVE-2012-2337  +12 more Upstream summary: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host […]

Read more
SLES 12 — google-cloud-sap-agent — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — google-cloud-sap-agent — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10135 (see also SUSE bugzilla) Related CVEs: CVE-2026-34986 CVE-2026-33186 Upstream summary: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON […]

Read more
SLES 12 — pam_u2f — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — pam_u2f — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0167-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23013 CVE-2018-20340 CVE-2019-12209 CVE-2019-12210 CVE-2019-9578 Upstream summary: In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module […]

Read more
SLES 12 — libsndfile1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libsndfile1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 11 April 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14769-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3246 CVE-2025-52194 CVE-2026-37555 CVE-2022-33065 CVE-2018-13139 CVE-2021-4156 CVE-2009-0186 CVE-2011-2696  +12 more Upstream summary: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to […]

Read more
CHAT