SLES

SLES 15 — alloy — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — alloy — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0327-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68156 CVE-2025-47913 CVE-2025-11065 CVE-2025-58058 Upstream summary: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, […]

Read more
SLES 12 — ghostscript — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — ghostscript — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 16 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3781 CVE-2025-27832 CVE-2025-27835 CVE-2025-27836 CVE-2024-46951 CVE-2024-46953 CVE-2024-46956 CVE-2024-33871  +12 more Upstream summary: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in […]

Read more
SLES 15 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2975-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12527 CVE-2020-15810 CVE-2020-15811 CVE-2025-62168 CVE-2025-59362 CVE-2023-5824 CVE-2024-25111 CVE-2024-25617  +12 more Upstream summary: An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication […]

Read more
SLES 15 — rekor — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rekor — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:3344 (see also SUSE bugzilla) Related CVEs: CVE-2025-30204 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2023-30551 CVE-2024-6104 CVE-2023-45288 CVE-2023-33199  +1 more Upstream summary: golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 […]

Read more
SLES 15 — golang-github-prometheus-alertmanager — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — golang-github-prometheus-alertmanager — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0191-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40577 CVE-2025-47908 Upstream summary: Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests […]

Read more
SLES 15 — net-snmp — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — net-snmp — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0668 (see also SUSE bugzilla) Related CVEs: CVE-2025-68615 CVE-2018-18065 CVE-2020-15862 CVE-2015-5621 CVE-2022-44792 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806  +8 more Upstream summary: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 […]

Read more
SLES 15 — ovn — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ovn — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0561-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0650 CVE-2023-3966 CVE-2024-22563 CVE-2023-5366 CVE-2023-3152 CVE-2022-4337 CVE-2022-4338 CVE-2020-27827  +6 more Upstream summary: A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP […]

Read more
SLES 12 — libdjvulibre21 — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libdjvulibre21 — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14728-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-3630 CVE-2021-32490 CVE-2025-53367 CVE-2021-46312  +6 more Upstream summary: A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function […]

Read more
SLES 15 — python311-python-socketio — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python311-python-socketio — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3780-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61765 Upstream summary: python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to […]

Read more
SLES 12 — jakarta-commons-fileupload — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — jakarta-commons-fileupload — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:14177 (see also SUSE bugzilla) Related CVEs: CVE-2025-48976 CVE-2013-2186 CVE-2016-1000031 Upstream summary: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects […]

Read more
CHAT