SLES 16

SLES 16 — unzip — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — unzip — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0026-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2018-1000035 CVE-2005-2475 CVE-2014-9913 CVE-2016-9844  +5 more Upstream summary: Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier […]

Read more
SLES 16 — plexus-utils — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — plexus-utils — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-67030 Upstream summary: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code Table […]

Read more
SLES 16 — dcraw — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — dcraw — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3392-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13735 CVE-2017-14608 CVE-2018-19566 CVE-2018-19568 CVE-2018-19655 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624  +3 more Upstream summary: There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in […]

Read more
SLES 16 — cloud-init — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — cloud-init — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:6-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8631 CVE-2020-8632 CVE-2024-6174 CVE-2019-0816 CVE-2021-3429 CVE-2022-2084 CVE-2023-1786 CVE-2024-11584 Upstream summary: cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier […]

Read more
SLES 16 — firewalld — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — firewalld — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-5410 Upstream summary: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) […]

Read more
SLES 16 — libxml2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libxml2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1538-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3705 CVE-2017-0663 CVE-2017-9049 CVE-2021-3517 CVE-2021-3537 CVE-2022-23308 CVE-2022-29824 CVE-2022-40303  +12 more Upstream summary: The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do […]

Read more
SLES 16 — cscope — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — cscope — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2004-2541 CVE-2006-4262 Upstream summary: Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with […]

Read more
SLES 16 — libzypp-plugin-appdata — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libzypp-plugin-appdata — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0095-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22643 Upstream summary: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server […]

Read more
SLES 16 — velociraptor — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — velociraptor — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 4 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14663-1 Related CVEs: CVE-2023-45133 CVE-2023-0242 CVE-2023-1732 CVE-2023-45683 CVE-2023-46234 CVE-2023-5950 CVE-2024-23331 CVE-2024-37298  +12 more Upstream summary: Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions […]

Read more
SLES 16 — gdb — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — gdb — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1010180 CVE-2022-4806 CVE-2017-16829 CVE-2018-7208 Upstream summary: GNU gdb All versions is affected by: Buffer Overflow – Out of bound memory access. The impact is: Deny […]

Read more
CHAT