SLES

SLES 12 — pam_yubico — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — pam_yubico — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-9275 Upstream summary: In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the […]

Read more
SLES 15 — libusbmuxd — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libusbmuxd — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5104 Upstream summary: The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on […]

Read more
SLES 15 — gnome-remote-desktop — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — gnome-remote-desktop — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10631 (see also SUSE bugzilla) Related CVEs: CVE-2025-5024 Upstream summary: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash […]

Read more
SLES 16 — ucode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — ucode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14758-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-24489 CVE-2021-0146 CVE-2022-21216 CVE-2022-33196 CVE-2022-41804 CVE-2023-23583 CVE-2023-23908 CVE-2023-42667  +12 more Upstream summary: Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to […]

Read more
SLES 15 — python3-ecdsa — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-ecdsa — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1436-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33936 Upstream summary: The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature […]

Read more
SLES 12 — postgresql94 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — postgresql94 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0077-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-12172 Upstream summary: PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under […]

Read more
SLES 15 — protobuf-devel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — protobuf-devel — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3745-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7254 Upstream summary: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted […]

Read more
SLES 16 — xmlgraphics-batik — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — xmlgraphics-batik — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0777-1 Related CVEs: CVE-2022-44729 CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890  +1 more Upstream summary: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML […]

Read more
SLES 16 — libxcb1 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libxcb1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1096-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2064 Upstream summary: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]

Read more
SLES 15 — openvswitch — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — openvswitch — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-3449 Upstream summary: Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary […]

Read more
CHAT