SLES

SLES 15 — libtiff5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libtiff5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0192 CVE-2015-7554 CVE-2016-9453 CVE-2025-61144 CVE-2009-2285 CVE-2009-2347 CVE-2010-2065 CVE-2010-2067  +12 more Upstream summary: Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used […]

Read more
SLES 12 — frr — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — frr — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0665-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61103 CVE-2025-61104 CVE-2025-61106 CVE-2025-61107 CVE-2025-61099 CVE-2025-61100 CVE-2025-61101 CVE-2025-61102  +2 more Upstream summary: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference […]

Read more
SLES 15 — libtpms0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libtpms0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1494-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1017 CVE-2021-3746 CVE-2025-49133 CVE-2023-1018 CVE-2021-3623 CVE-2021-3446 CVE-2021-3505 Upstream summary: An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past […]

Read more
SLES 15 — transfig — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — transfig — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14836-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-21532 CVE-2020-21533 CVE-2020-21534 CVE-2020-21680 CVE-2020-21681 CVE-2020-21682 CVE-2020-21683 CVE-2025-31162  +12 more Upstream summary: fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. […]

Read more
SLES 15 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory ESSA-2025:2835 (see also SUSE bugzilla) Related CVEs: CVE-2024-56737 CVE-2025-0624 CVE-2023-4692 CVE-2021-3695 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736  +12 more Upstream summary: GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c […]

Read more
SLES 12 — gdm — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — gdm — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:20479-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6018 CVE-2020-16125 CVE-2011-1709 CVE-2018-14424 Upstream summary: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw […]

Read more
SLES 15 — pgadmin4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pgadmin4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 21 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-29361 CVE-2024-3116 CVE-2025-12764 CVE-2025-12765 CVE-2025-9636 CVE-2025-27152 CVE-2023-1907 CVE-2024-38355  +12 more Upstream summary: Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers […]

Read more
SLES 15 — perl — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 July 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-6913 CVE-2023-31484 CVE-2025-40909 CVE-2018-6798 CVE-2010-2761 CVE-2010-4410 CVE-2010-4411 CVE-2010-4777  +11 more Upstream summary: Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent […]

Read more
SLES 12 — ruby2.1-rubygem-rack — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — ruby2.1-rubygem-rack — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0765-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25126 CVE-2024-26141 CVE-2015-3225 CVE-2024-26146 Upstream summary: Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media type parser […]

Read more
SLES 12 — coreutils — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — coreutils — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 16 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1637-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4041 CVE-2015-4042 CVE-2025-5278 CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Upstream summary: The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a […]

Read more
CHAT