SLES

SLES 12 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 9 September 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory GHSA-3365-q9qx-f98m (see also SUSE bugzilla) Related CVEs: CVE-2020-15810 CVE-2020-15811 CVE-2019-12527 CVE-2025-62168 CVE-2025-59362 CVE-2024-25617 CVE-2024-25111 CVE-2023-50269  +12 more Upstream summary: An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due […]

Read more
SLES 12 — libzvbi0 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libzvbi0 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 September 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0979-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2176 CVE-2025-2177 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 Upstream summary: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption […]

Read more
SLES 15 — apache-commons-beanutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — apache-commons-beanutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9114 (see also SUSE bugzilla) Related CVEs: CVE-2025-48734 CVE-2019-10086 Upstream summary: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to […]

Read more
SLES 12 — sqlite3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — sqlite3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:11802 (see also SUSE bugzilla) Related CVEs: CVE-2025-6965 CVE-2023-2137 CVE-2022-46908 CVE-2019-19603 CVE-2017-2518 CVE-2018-20346 CVE-2019-19880 CVE-2019-19926  +12 more Upstream summary: There exists a vulnerability in SQLite versions before 3.50.2 where the number of […]

Read more
SLES 12 — udisks2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — udisks2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:15017 (see also SUSE bugzilla) Related CVEs: CVE-2025-8067 CVE-2021-3802 CVE-2014-0004 Upstream summary: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS […]

Read more
SLES 15 — nbdkit — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — nbdkit — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01888-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-47711 CVE-2025-47712 CVE-2021-3716 Upstream summary: There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If […]

Read more
SLES 15 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0198-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-63757 CVE-2025-59728 CVE-2024-7055 CVE-2023-51794 CVE-2023-50010 CVE-2023-49502 CVE-2024-31578 CVE-2023-51793  +12 more Upstream summary: Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0. Table […]

Read more
SLES 12 — libxkbfile1 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libxkbfile1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:2500 (see also SUSE bugzilla) Related CVEs: CVE-2025-26595 Upstream summary: A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and […]

Read more
SLES 15 — python311 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python311 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2022-4303 CVE-2023-41105 CVE-2025-12781 CVE-2025-1795 Upstream summary: The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes […]

Read more
SLES 15 — python2-setuptools — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-setuptools — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10407 (see also SUSE bugzilla) Related CVEs: CVE-2025-47273 CVE-2024-6345 Upstream summary: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in […]

Read more
CHAT