SLES 12

SLES 12 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 6 January 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:019 (see also SUSE bugzilla) Related CVEs: CVE-2011-1180 CVE-2024-26923 CVE-2022-2991 CVE-2018-25020 CVE-2016-3135 CVE-2016-6187 CVE-2016-7039 CVE-2016-8636  +12 more Upstream summary: Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux […]

Read more
SLES 12 — go1.22 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — go1.22 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6908 (see also SUSE bugzilla) Related CVEs: CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-24788 Upstream summary: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic […]

Read more
SLES 12 — netatalk — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — netatalk — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 30 December 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0316-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-43634 CVE-2021-31439 CVE-2022-23121 CVE-2022-23125 CVE-2024-38439 CVE-2024-38440 CVE-2024-38441 CVE-2022-22995  +3 more Upstream summary: This vulnerability allows remote attackers to execute arbitrary code on affected installations of […]

Read more
SLES 12 — perl-Crypt-OpenSSL-RSA — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — perl-Crypt-OpenSSL-RSA — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01884-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2467 Upstream summary: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style […]

Read more
SLES 12 — booth — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — booth — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 November 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2040-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3049 CVE-2022-2553 Upstream summary: A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow […]

Read more
SLES 12 — python-Jinja2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-Jinja2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 November 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56326 CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 CVE-2024-34064 CVE-2014-0012 Upstream summary: Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed […]

Read more
SLES 12 — less — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — less — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32487 CVE-2022-48624 CVE-2014-9488 Upstream summary: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is […]

Read more
SLES 12 — kernel-rt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — kernel-rt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 November 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2894-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48791 CVE-2022-48911 CVE-2022-48945 CVE-2024-44987 CVE-2022-48822 CVE-2024-41062 CVE-2024-41087 CVE-2024-42232  +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix […]

Read more
SLES 12 — golang-github-prometheus-node_exporter — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — golang-github-prometheus-node_exporter — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 October 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3911-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-9264 CVE-2021-41244 CVE-2022-32149 CVE-2022-41723 CVE-2023-29409 CVE-2022-27664 CVE-2021-43798 CVE-2022-21698  +12 more Upstream summary: The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` […]

Read more
SLES 12 — typelib — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — typelib — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 10 October 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9144 (see also SUSE bugzilla) Related CVEs: CVE-2024-4558 CVE-2022-0108 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1844  +12 more Upstream summary: Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a […]

Read more
CHAT