SLES

SLES 16 — golang-github-prometheus-prometheus — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — golang-github-prometheus-prometheus — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1465-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46146 CVE-2019-10215 CVE-2021-29622 Upstream summary: Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access […]

Read more
SLES 16 — ovmf — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — ovmf — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 2 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0579-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-12178 CVE-2017-5731 CVE-2018-12180 CVE-2018-3630 CVE-2019-14553 CVE-2019-14575 CVE-2021-38578 CVE-2022-36763  +12 more Upstream summary: Buffer overflow in network stack for EDK II may allow unprivileged user to […]

Read more
SLES 12 — libraw-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libraw-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01569-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-43962 CVE-2025-43964 Upstream summary: In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values […]

Read more
SLES 16 — python313-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — python313-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0082-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers […]

Read more
SLES 15 — munge — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — munge — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2918 (see also SUSE bugzilla) Related CVEs: CVE-2026-25506 CVE-2019-3691 Upstream summary: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer […]

Read more
SLES 15 — ImageMagick — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ImageMagick — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1597-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33901 CVE-2026-33908 CVE-2026-28686 CVE-2026-28690 CVE-2026-31853 CVE-2026-28691 CVE-2026-30883 CVE-2026-28493  +12 more Upstream summary: ImageMagick is free and open-source software used for editing and manipulating digital images. […]

Read more
SLES 15 — python3-urllib3 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-urllib3 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33503 CVE-2025-66471 CVE-2026-21441 CVE-2025-66418 CVE-2025-50181 CVE-2024-37891 CVE-2023-45803 CVE-2023-43804 Upstream summary: An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many […]

Read more
SLES 16 — rust1.94 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — rust1.94 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2026:1001-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31812 Upstream summary: Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a […]

Read more
SLES 15 — bouncycastle — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bouncycastle — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-14813 CVE-2026-3505 CVE-2026-5598 CVE-2024-30172 CVE-2023-33201 CVE-2015-7940 CVE-2016-1000338 CVE-2019-17359  +12 more Upstream summary: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of […]

Read more
CHAT