SLES 15

SLES 15 — python310 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python310 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10950 (see also SUSE bugzilla) Related CVEs: CVE-2026-2297 Upstream summary: The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does […]

Read more
SLES 15 — rabbitmq-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rabbitmq-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03234-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-50200 CVE-2025-30219 CVE-2016-9877 CVE-2014-9494 CVE-2015-0862 Upstream summary: RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in […]

Read more
SLES 15 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1923-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3204 CVE-2019-25034 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 CVE-2025-11411 CVE-2024-8508 CVE-2022-30698  +12 more Upstream summary: A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various […]

Read more
SLES 15 — ruby2.5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1066-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27820 CVE-2024-47220 CVE-2024-43398 CVE-2021-33621 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2018-1000074  +12 more Upstream summary: zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and […]

Read more
SLES 15 — libcfg6 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libcfg6 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 3 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:7201 (see also SUSE bugzilla) Related CVEs: CVE-2025-30472 CVE-2026-35091 CVE-2026-35092 Upstream summary: Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in […]

Read more
SLES 15 — libcap2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libcap2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:12423 (see also SUSE bugzilla) Related CVEs: CVE-2026-4878 CVE-2023-2603 CVE-2023-2602 Upstream summary: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` […]

Read more
SLES 15 — go1.23 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — go1.23 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:13935 (see also SUSE bugzilla) Related CVEs: CVE-2025-4674 CVE-2025-47906 CVE-2025-47907 CVE-2025-0913 CVE-2025-4673 CVE-2025-22871 Upstream summary: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly […]

Read more
SLES 15 — pam_pkcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pam_pkcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0688-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-24031 CVE-2025-24032 Upstream summary: PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 […]

Read more
SLES 15 — python3-ldap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-ldap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:4454-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61911 CVE-2025-61912 Upstream summary: python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, the sanitization method `ldap.filter.escape_filter_chars` […]

Read more
SLES 15 — busybox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — busybox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0758-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-26157 CVE-2026-26158 CVE-2025-60876 CVE-2022-48174 CVE-2016-2147 CVE-2018-1000500 CVE-2018-1000517 CVE-2021-28831  +12 more Upstream summary: A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction […]

Read more
CHAT