SLES

SLES 16 — oqs-provider — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — oqs-provider — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0005-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37305 Upstream summary: oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using […]

Read more
SLES 12 — openCryptoki — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — openCryptoki — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:4717 (see also SUSE bugzilla) Related CVEs: CVE-2026-23893 CVE-2024-0914 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when […]

Read more
SLES 15 — rabbitmq-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rabbitmq-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03234-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-50200 CVE-2025-30219 CVE-2016-9877 CVE-2014-9494 CVE-2015-0862 Upstream summary: RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in […]

Read more
SLES 15 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1923-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3204 CVE-2019-25034 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 CVE-2025-11411 CVE-2024-8508 CVE-2022-30698  +12 more Upstream summary: A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various […]

Read more
SLES 15 — ruby2.5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1066-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27820 CVE-2024-47220 CVE-2024-43398 CVE-2021-33621 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2018-1000074  +12 more Upstream summary: zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and […]

Read more
SLES 16 — dnsmasq — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — dnsmasq — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:233-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687 CVE-2023-49441  +12 more Upstream summary: A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow […]

Read more
SLES 16 — chrony — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — chrony — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-0021 CVE-2012-4502 CVE-2012-4503 CVE-2020-14367 CVE-2016-1567 Upstream summary: Chrony before 1.29.1 has traffic amplification in cmdmon protocol Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
SLES 16 — aardvark-dns — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — aardvark-dns — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:7094 (see also SUSE bugzilla) Related CVEs: CVE-2024-8418 Upstream summary: A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP […]

Read more
SLES 16 — libpq5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libpq5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5869 CVE-2026-2007 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-12818 CVE-2020-25695 CVE-2020-25696  +12 more Upstream summary: A flaw was found in PostgreSQL that allows authenticated database users to execute […]

Read more
SLES 16 — python313-ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — python313-ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2134-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use […]

Read more
CHAT