SLES 12

SLES 12 — evince — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — evince — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:14141-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1010006 CVE-2017-1000159 CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 CVE-2017-1000083 CVE-2019-11459 Upstream summary: Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. […]

Read more
How to Secure Nginx with Let's Encrypt on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Secure Nginx with Let’s Encrypt on SLES 12

Introduction This tutorial covers How to Secure Nginx with Let’s Encrypt on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: […]

Read more
SLES 12 — bubblewrap — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — bubblewrap — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1826-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12439 Upstream summary: bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a […]

Read more
SLES 12 — libopenssl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libopenssl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3863-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0735 CVE-2019-1543 Upstream summary: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use […]

Read more
SLES 12 — libjpeg8 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libjpeg8 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2201 CVE-2020-17541 CVE-2020-35538 CVE-2020-13790 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813  +1 more Upstream summary: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due […]

Read more
How to Configure AppArmor on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure AppArmor on SLES 12

Introduction This tutorial covers How to Configure AppArmor on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Check AppArmor Status systemctl status apparmor aa-status Step 2 — […]

Read more
How to Configure OpenSCAP Security Compliance on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure OpenSCAP Security Compliance on SLES 12

Introduction This tutorial covers How to Configure OpenSCAP Security Compliance on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]

Read more
SLES 12 — hunspell — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — hunspell — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2966-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-16707 Upstream summary: Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 12 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5984 CVE-2019-19451 Upstream summary: Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary […]

Read more
How to Configure SLES 12 for SAP Workloads — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure SLES 12 for SAP Workloads

Introduction This tutorial covers How to Configure SLES 12 for SAP Workloads on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Configure SLES for SAP zypper install -y patterns-sap-hana Step […]

Read more
CHAT