SLES

SLES 15 — pam — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pam — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10027 (see also SUSE bugzilla) Related CVEs: CVE-2025-6020 CVE-2024-10041 CVE-2024-22365 CVE-2010-3430 CVE-2010-3431 CVE-2010-3853 CVE-2011-3148 CVE-2014-2583  +3 more Upstream summary: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled […]

Read more
SLES 16 — libcaca0 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libcaca0 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 6 November 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30498 CVE-2021-30499 CVE-2018-20547 CVE-2021-3410 CVE-2022-0856 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546  +2 more Upstream summary: A flaw was found in libcaca. A heap buffer overflow in export.c in […]

Read more
SLES 15 — nfs-doc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — nfs-doc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3689 CVE-2025-12801 Upstream summary: The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 […]

Read more
SLES 15 — libavif16 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libavif16 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 4 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03237-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-6351 CVE-2023-6350 CVE-2025-48174 CVE-2025-48175 Upstream summary: Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap […]

Read more
SLES 15 — fetchmail — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — fetchmail — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3845-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61962 CVE-2021-36386 CVE-2021-39272 CVE-2009-2666 CVE-2010-1167 CVE-2011-1947 CVE-2012-3482 Upstream summary: In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status […]

Read more
SLES 12 — abseil-cpp-devel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — abseil-cpp-devel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 October 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0190-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0838 Upstream summary: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an […]

Read more
SLES 12 — gstreamer-plugins-good — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — gstreamer-plugins-good — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 October 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:11122 (see also SUSE bugzilla) Related CVEs: CVE-2024-47540 CVE-2024-47537 CVE-2025-47183 CVE-2024-47543 CVE-2024-47545 CVE-2024-47596 CVE-2024-47597 CVE-2024-47599  +12 more Upstream summary: GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack […]

Read more
SLES 15 — perl-Authen-SASL — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-Authen-SASL — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03087-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of […]

Read more
SLES 15 — augeas — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — augeas — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2025-2588 CVE-2017-7555 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]

Read more
SLES 12 — clamav — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — clamav — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 24 October 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0453-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-20032 CVE-2025-20260 CVE-2024-20505 CVE-2024-20380 CVE-2023-40477 CVE-2023-20197 CVE-2022-20771 CVE-2022-20785  +12 more Upstream summary: On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was […]

Read more
CHAT