SLES

SLES 16 — emacs — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — emacs — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4304-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-27985 CVE-2023-27986 CVE-2024-39331 CVE-2024-53920  +9 more Upstream summary: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in […]

Read more
SLES 16 — apache-commons-net — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — apache-commons-net — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-37533 Upstream summary: Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect […]

Read more
SLES 15 — wicked2nm — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — wicked2nm — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02957-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-55159 Upstream summary: slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within […]

Read more
SLES 15 — postgresql-jdbc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — postgresql-jdbc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 17 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0769-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1597 CVE-2026-42198 CVE-2022-31197 CVE-2022-41946 Upstream summary: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. […]

Read more
SLES 16 — libsoup — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libsoup — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:23139 (see also SUSE bugzilla) Related CVEs: CVE-2025-12105 CVE-2025-14523 CVE-2025-32049 CVE-2026-1760 CVE-2026-2708 CVE-2026-1536 CVE-2026-1761 CVE-2025-11021  +12 more Upstream summary: A flaw was found in the asynchronous message queue handling of the libsoup […]

Read more
SLES 16 — xmlgraphics-commons — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — xmlgraphics-commons — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11988 Upstream summary: Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using […]

Read more
SLES 16 — aaa_base — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — aaa_base — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0461 Upstream summary: /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite […]

Read more
SLES 16 — google-gson — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — google-gson — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2044-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25647 Upstream summary: The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead […]

Read more
CHAT