SLES

SLES 15 — log4j — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — log4j — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 24 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory BLOG-LOG4SHELL (see also SUSE bugzilla) Related CVEs: CVE-2021-44228 CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-45105 CVE-2021-45046 CVE-2026-34477 CVE-2026-34479  +7 more Upstream summary: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI […]

Read more
SLES 16 — checkbashisms — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — checkbashisms — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2012-2240 CVE-2012-2241 CVE-2012-3500 Upstream summary: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." Table of contents […]

Read more
SLES 15 — Mesa — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — Mesa — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1343-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40393 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 CVE-2019-5068 Upstream summary: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount […]

Read more
SLES 15 — libgif7 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgif7 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8117 (see also SUSE bugzilla) Related CVEs: CVE-2023-48161 CVE-2018-11490 CVE-2026-23868 CVE-2025-31344 CVE-2019-15133 CVE-2022-28506 CVE-2015-7555 CVE-2016-3977  +1 more Upstream summary: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to […]

Read more
SLES 16 — libxerces-c — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libxerces-c — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3277-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-12627 CVE-2018-1311 CVE-2009-1885 CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 Upstream summary: In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a […]

Read more
SLES 16 — libguestfs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libguestfs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1626-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4419 CVE-2013-2124 Upstream summary: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the –remote or –listen option, does not properly check the […]

Read more
SLES 16 — libyaml-cpp0_8 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libyaml-cpp0_8 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0631-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5950 Upstream summary: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) […]

Read more
SLES 16 — libxslt1 — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libxslt1 — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:20892-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11731 CVE-2019-18197 CVE-2021-30560 CVE-2024-55549 CVE-2025-24855 CVE-2025-7424 CVE-2008-1767 CVE-2016-4738  +6 more Upstream summary: A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT […]

Read more
SLES 16 — openvpn — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — openvpn — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 22 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-46850 CVE-2025-13086 CVE-2017-7521 CVE-2017-7522 CVE-2022-0547 CVE-2005-3393 CVE-2005-3409 CVE-2006-1629  +9 more Upstream summary: Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined […]

Read more
SLES 15 — python3-pyasn1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-pyasn1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-30922 CVE-2026-23490 Upstream summary: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service […]

Read more
CHAT