Troubleshooting

SLES 15 — ruby2.5-rubygem-actionpack — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5-rubygem-actionpack — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0442-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22792 CVE-2023-22795 CVE-2021-22904 CVE-2021-22885 CVE-2024-47887 CVE-2023-28362 CVE-2022-23633 Upstream summary: A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, […]

Read more
SLES 15 — ruby2.5-rubygem-activesupport — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5-rubygem-activesupport — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0275-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22796 Upstream summary: A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can […]

Read more
SLES 15 — libXpm4 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libXpm4 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:323-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4883 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 Upstream summary: A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external […]

Read more
SLES 15 — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1123-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14779 CVE-2018-14780 Upstream summary: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the […]

Read more
SLES 15 — erlang26 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — erlang26 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2024:2078-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31008 CVE-2020-25623 CVE-2020-35733 CVE-2026-32147 CVE-2023-46118 CVE-2021-22116 CVE-2021-32718 CVE-2021-32719 Upstream summary: RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation […]

Read more
SLES 15 — mgetty — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — mgetty — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2850-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 CVE-2019-1010190 Upstream summary: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize […]

Read more
SLES 15 — mpg123 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — mpg123 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-10683 CVE-2017-11126 Upstream summary: In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to […]

Read more
SLES 15 — libexiv2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libexiv2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3889-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29457 CVE-2021-31292 CVE-2025-55304 CVE-2018-11531 CVE-2018-20097 CVE-2018-20098 CVE-2019-13109 CVE-2021-29473  +12 more Upstream summary: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and […]

Read more
SLES 15 — openslp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — openslp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:723-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17833 CVE-2010-3609 CVE-2016-4912 CVE-2016-7567 Upstream summary: OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself […]

Read more
SLES 15 — perl-DBI — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-DBI — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:14510-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20919 CVE-2020-14392 CVE-2020-14393 CVE-2014-10401 CVE-2014-10402 Upstream summary: An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for […]

Read more
CHAT