SLES

SLES 15 — pam — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pam — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10027 (see also SUSE bugzilla) Related CVEs: CVE-2025-6020 CVE-2024-10041 CVE-2024-22365 CVE-2010-3430 CVE-2010-3431 CVE-2010-3853 CVE-2011-3148 CVE-2014-2583  +3 more Upstream summary: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled […]

Read more
SLES 12 — MozillaFirefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — MozillaFirefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:19588 (see also SUSE bugzilla) Related CVEs: CVE-2026-7320 CVE-2026-7321 CVE-2026-7322 CVE-2026-7323 CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749  +12 more Upstream summary: Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability […]

Read more
SLES 12 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2010:006 (see also SUSE bugzilla) Related CVEs: CVE-2009-4212 CVE-2024-37370 CVE-2024-26458 CVE-2023-36054 CVE-2020-28196 CVE-2002-2443 CVE-2009-0846 CVE-2009-0847  +12 more Upstream summary: Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in […]

Read more
SLES 12 — libslurm36 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libslurm36 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01751-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-43904 Upstream summary: In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator. Table […]

Read more
SLES 12 — libcjose0 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libcjose0 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3030-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37464 Upstream summary: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag […]

Read more
SLES 16 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — krb5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2008:016 (see also SUSE bugzilla) Related CVEs: CVE-2008-0062 CVE-2008-0948 CVE-2009-4212 CVE-2002-2443 CVE-2007-0957 CVE-2007-2443 CVE-2008-0063 CVE-2009-0846  +12 more Upstream summary: KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for […]

Read more
SLES 16 — docker-compose — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — docker-compose — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20656-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-62725 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-32149 CVE-2022-41723 CVE-2022-41715 Upstream summary: Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes […]

Read more
SLES 16 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2919-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-22046 CVE-2022-3964 CVE-2023-50010 CVE-2023-51793 CVE-2023-51794 CVE-2024-31578 CVE-2024-7055 CVE-2025-7700  +12 more Upstream summary: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory […]

Read more
SLES 16 — libconfuse2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libconfuse2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3331-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40320 CVE-2018-14447 Upstream summary: cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
SLES 15 — python311-bleach — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python311-bleach — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-7753 CVE-2020-6817 CVE-2020-6802 CVE-2020-6816 CVE-2021-23980 Upstream summary: An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if […]

Read more
CHAT