SLES

SLES 15 — sed — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — sed — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1659-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the […]

Read more
SLES 15 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1000005 CVE-2018-1000301 CVE-2026-1965 CVE-2025-9086 CVE-2024-6197 CVE-2023-38545 CVE-2023-38039 CVE-2023-23914  +12 more Upstream summary: libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code […]

Read more
SLES 16 — libXvMC1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libXvMC1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1990 CVE-2013-1999 Upstream summary: Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]

Read more
SLES 16 — plexus-archiver — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — plexus-archiver — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:0560-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37460 Upstream summary: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. […]

Read more
SLES 16 — python313-marshmallow — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — python313-marshmallow — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0226-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68480 CVE-2018-17175 Upstream summary: Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before […]

Read more
SLES 16 — libvdpau1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libvdpau1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1892-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, […]

Read more
SLES 16 — python313-WebOb — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — python313-WebOb — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2969-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-42353 Upstream summary: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does […]

Read more
SLES 15 — libprotoc20 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libprotoc20 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:3094 (see also SUSE bugzilla) Related CVEs: CVE-2026-0994 CVE-2025-4565 CVE-2022-1941 CVE-2021-22570 Upstream summary: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested […]

Read more
SLES 15 — bsdtar — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bsdtar — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:14130 (see also SUSE bugzilla) Related CVEs: CVE-2025-5914 CVE-2024-48958 CVE-2024-48957 CVE-2024-20697 CVE-2024-20696 CVE-2024-26256 CVE-2022-26280 CVE-2025-5916  +12 more Upstream summary: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() […]

Read more
SLES 16 — rekor — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — rekor — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30551 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2025-30204 CVE-2023-33199 CVE-2023-45288 CVE-2024-6104 Upstream summary: Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 […]

Read more
CHAT