SLES

SLES 15 — bouncycastle — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bouncycastle — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-14813 CVE-2026-3505 CVE-2026-5598 CVE-2024-30172 CVE-2023-33201 CVE-2015-7940 CVE-2016-1000338 CVE-2019-17359  +12 more Upstream summary: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of […]

Read more
SLES 15 — libraw20 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libraw20 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1555-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-20884 CVE-2026-20889 CVE-2026-5342 Upstream summary: An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead […]

Read more
SLES 15 — podman — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — podman — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:15900 (see also SUSE bugzilla) Related CVEs: CVE-2025-9566 CVE-2025-6032 CVE-2024-11218 CVE-2022-1227 CVE-2022-21698 CVE-2025-47914 CVE-2024-9676 CVE-2024-9675  +7 more Upstream summary: There's a vulnerability in podman where an attacker may use the kube play […]

Read more
SLES 15 — apache2-mod_security2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — apache2-mod_security2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:8837 (see also SUSE bugzilla) Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2023-24021 CVE-2022-48279 CVE-2025-54571 CVE-2009-5031 CVE-2012-4528 CVE-2013-1915  +2 more Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for […]

Read more
SLES 15 — rekor — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rekor — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:3344 (see also SUSE bugzilla) Related CVEs: CVE-2025-30204 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2023-30551 CVE-2024-6104 CVE-2023-45288 CVE-2023-33199  +1 more Upstream summary: golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 […]

Read more
SLES 12 — docker — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — docker — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:4391-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41110 CVE-2025-22869 CVE-2025-22868 CVE-2023-47108 CVE-2023-45142 CVE-2018-16873 CVE-2019-14271 CVE-2019-19921  +12 more Upstream summary: Moby is an open-source project created by Docker for software containerization. A security […]

Read more
SLES 12 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2918-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33193 CVE-2021-44790 CVE-2010-0425 CVE-2025-49812 CVE-2025-23048 CVE-2025-49630 CVE-2023-45802 CVE-2024-40725  +12 more Upstream summary: A crafted method sent through HTTP/2 will bypass validation and be forwarded by […]

Read more
SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0053-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-4104 CVE-2022-23302 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can […]

Read more
SLES 12 — cups — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — cups — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:023 (see also SUSE bugzilla) Related CVEs: CVE-2010-2941 CVE-2012-6094 CVE-2026-34990 CVE-2025-58060 CVE-2024-35235 CVE-2023-4504 CVE-2023-34241 CVE-2020-3898  +12 more Upstream summary: ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory […]

Read more
CHAT