SLES 15

How to Configure AIDE File Integrity Monitoring on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure AIDE File Integrity Monitoring on SLES 15

Introduction This tutorial covers How to Configure AIDE File Integrity Monitoring on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
SLES 15 — autofs — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — autofs — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1020-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8169 Upstream summary: automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of […]

Read more
SLES 15 — libFLAC8 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libFLAC8 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1577-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8962 CVE-2014-9028 Upstream summary: Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file. […]

Read more
SLES 15 — libXrender1 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libXrender1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1987 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]

Read more
SLES 15 — libgnomesu — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgnomesu — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-1946 Upstream summary: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid […]

Read more
How to Set Up Snort IDS on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up Snort IDS on SLES 15

Introduction This tutorial covers How to Set Up Snort IDS on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more
SLES 15 — libxmltooling7 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libxmltooling7 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0140-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0486 CVE-2018-0489 CVE-2019-9628 Upstream summary: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures […]

Read more
SLES 15 — yast2-rmt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-rmt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0629-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20105 CVE-2018-17957 Upstream summary: A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local […]

Read more
SLES 15 — yast2-users — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-users — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1138-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1601 Upstream summary: yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an […]

Read more
SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]

Read more
CHAT