+ 44 ( 01244 ) 911212

SLES 15 — libunwind — vulnerability — patch and remediation guide

July 22, 2018
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 22 July 2018 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0284-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-3239 Upstream summary: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. […]

SLES 15 — guile — multiple vulnerabilities (2 CVEs) — patch and remediation guide

July 21, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 21 July 2018 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:0394-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-8605 CVE-2016-8606 Upstream summary: The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, […]