SLES 15

SLES 15 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2010:006 (see also SUSE bugzilla) Related CVEs: CVE-2009-4212 CVE-2024-37370 CVE-2024-26458 CVE-2024-26462 CVE-2023-36054 CVE-2002-2443 CVE-2009-0846 CVE-2009-0847  +12 more Upstream summary: Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in […]

Read more
SLES 15 — python2-waitress — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-waitress — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3876-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-49769 CVE-2022-24761 CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 Upstream summary: Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client […]

Read more
SLES 15 — cups-filters — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cups-filters — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:7346 (see also SUSE bugzilla) Related CVEs: CVE-2024-47076 CVE-2024-47176 CVE-2023-24805 CVE-2025-57812 CVE-2025-64524 CVE-2024-47850 CVE-2013-6473 CVE-2013-6474  +12 more Upstream summary: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of […]

Read more
SLES 15 — osc — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — osc — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2067-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3685 CVE-2024-22034 CVE-2015-0778 CVE-2019-3681 CVE-2012-1095 Upstream summary: Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary […]

Read more
SLES 15 — libnm0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libnm0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1419-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-9615 CVE-2006-7246 CVE-2015-2924 CVE-2018-1000135 CVE-2020-10754 CVE-2021-20297 CVE-2016-0764 Upstream summary: A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong […]

Read more
SLES 15 — python3-PyMySQL — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-PyMySQL — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9193 (see also SUSE bugzilla) Related CVEs: CVE-2024-36039 Upstream summary: PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. Table of contents […]

Read more
SLES 15 — libabsl2308_0_0 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libabsl2308_0_0 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0190-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0838 Upstream summary: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an […]

Read more
SLES 15 — xstream — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xstream — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:4037-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47072 CVE-2022-41966 CVE-2016-3674 CVE-2017-7957 CVE-2021-21342 CVE-2021-21344 CVE-2021-21345 CVE-2021-21346  +12 more Upstream summary: XStream is a simple library to serialize objects to XML and back again. […]

Read more
SLES 15 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-1492 CVE-2024-11595 CVE-2024-11596 CVE-2021-4147 CVE-2013-4296 CVE-2017-1000256 CVE-2019-10132 CVE-2019-10161  +12 more Upstream summary: Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 […]

Read more
SLES 15 — freeradius-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — freeradius-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory ESSA-2024:0650 (see also SUSE bugzilla) Related CVEs: CVE-2024-3596 CVE-2022-41860 CVE-2022-41861 CVE-2019-11235 CVE-2019-17185 CVE-2022-41859 CVE-2012-3547 CVE-2014-2015  +12 more Upstream summary: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local […]

Read more
CHAT