SLES

SLES 15 — jakarta-commons-fileupload — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — jakarta-commons-fileupload — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:2188-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3092 CVE-2016-1000031 Upstream summary: The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x […]

Read more
SLES 12 — python36 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python36 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:740-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10903 CVE-2020-13757 CVE-2020-1747 CVE-2017-18342 CVE-2018-1000807 CVE-2025-4516 CVE-2024-5642 CVE-2024-0397  +12 more Upstream summary: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag […]

Read more
SLES 16 — lame — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — lame — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:0543-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users […]

Read more
SLES 12 — gsl — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — gsl — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3527-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35357 Upstream summary: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and […]

Read more
SLES 16 — libHX32 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libHX32 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:019 (see also SUSE bugzilla) Related CVEs: CVE-2010-2947 Upstream summary: Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause […]

Read more
SLES 15 — saphanabootstrap-formula — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — saphanabootstrap-formula — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0009-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45153 Upstream summary: An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP […]

Read more
SLES 15 — libXxf86dga1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libXxf86dga1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]

Read more
SLES 16 — libXfixes3 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libXfixes3 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1097-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1983 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]

Read more
SLES 15 — xmlbeans — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xmlbeans — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-23926 Upstream summary: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious […]

Read more
SLES 12 — wayland-devel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — wayland-devel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1860-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3782 Upstream summary: An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The […]

Read more
CHAT