SLES 15

SLES 15 — gnutls — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — gnutls — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 June 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:16116 (see also SUSE bugzilla) Related CVEs: CVE-2025-32988 CVE-2022-2509 CVE-2014-0092 CVE-2016-8610 CVE-2020-11501 CVE-2020-13777 CVE-2021-20231 CVE-2021-20232  +12 more Upstream summary: A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due […]

Read more
SLES 15 — GraphicsMagick — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — GraphicsMagick — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1274-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1270 CVE-2025-32460 CVE-2025-27795 Upstream summary: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
SLES 15 — pmix — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pmix — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2105-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-29158 CVE-2024-29161 CVE-2024-29166 CVE-2024-32608 CVE-2024-32610 CVE-2024-32614 CVE-2024-32619 CVE-2024-32620  +5 more Upstream summary: HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the […]

Read more
SLES 15 — perl-Crypt-OpenSSL-RSA — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-Crypt-OpenSSL-RSA — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01884-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2467 Upstream summary: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style […]

Read more
SLES 15 — python3-h2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-h2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03199-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-57804 Upstream summary: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to […]

Read more
SLES 15 — gnome-remote-desktop — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — gnome-remote-desktop — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10631 (see also SUSE bugzilla) Related CVEs: CVE-2025-5024 Upstream summary: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash […]

Read more
SLES 15 — libzzip — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libzzip — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2925-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-39134 CVE-2024-39133 CVE-2020-18442 CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978  +11 more Upstream summary: A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a […]

Read more
SLES 15 — iproute2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — iproute2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1418-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-58251 Upstream summary: In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, […]

Read more
SLES 15 — azure-cli-core — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — azure-cli-core — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1019-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-24049 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

Read more
CHAT