SLES 15

SLES 15 — fontforge — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — fontforge — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:6628 (see also SUSE bugzilla) Related CVEs: CVE-2025-15270 CVE-2024-25081 CVE-2024-25082 CVE-2020-5395 CVE-2020-5496 CVE-2025-50949 CVE-2017-17521 Upstream summary: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows […]

Read more
SLES 15 — ctdb — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ctdb — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03603-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-10230 CVE-2021-44142 CVE-2020-1472 CVE-2023-4154 CVE-2023-34966 CVE-2020-25720 CVE-2021-20251 CVE-2022-37966  +12 more Upstream summary: A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS […]

Read more
SLES 15 — gnuplot — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — gnuplot — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 8 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-25412 CVE-2025-31176 CVE-2025-31177 CVE-2025-31178 CVE-2025-31179 CVE-2025-31180 CVE-2025-31181 CVE-2025-3359  +6 more Upstream summary: com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that […]

Read more
SLES 15 — icu — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — icu — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:11888 (see also SUSE bugzilla) Related CVEs: CVE-2025-5222 CVE-2020-10531 CVE-2020-21913 Upstream summary: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' […]

Read more
SLES 15 — git — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — git — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 26 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0100-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9390 CVE-2019-1353 CVE-2025-48384 CVE-2025-27614 CVE-2025-48385 CVE-2024-24577 CVE-2024-32002 CVE-2024-32004  +12 more Upstream summary: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and […]

Read more
SLES 15 — djvulibre — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — djvulibre — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1641-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-3630 CVE-2025-53367 CVE-2021-46310  +6 more Upstream summary: A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write […]

Read more
SLES 15 — python311-marshmallow — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python311-marshmallow — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0226-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68480 Upstream summary: Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 […]

Read more
SLES 15 — FastCGI — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — FastCGI — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02369-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23016 CVE-2011-2766 Upstream summary: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen […]

Read more
SLES 15 — tack — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — tack — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:5913 (see also SUSE bugzilla) Related CVEs: CVE-2025-69720 CVE-2023-50495 CVE-2023-29491 CVE-2022-29458 CVE-2021-39537 CVE-2018-19211 CVE-2019-17594 CVE-2019-17595  +1 more Upstream summary: The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow […]

Read more
SLES 15 — cmake — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cmake — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02975-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-9301 Upstream summary: A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx. This manipulation causes reachable assertion. The […]

Read more
CHAT