SLES 15

SLES 15 — saphanabootstrap-formula — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — saphanabootstrap-formula — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0009-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45153 Upstream summary: An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP […]

Read more
SLES 15 — libaom3 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libaom3 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0517-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-6879 Upstream summary: Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). Table of contents […]

Read more
SLES 15 — jtidy — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — jtidy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3016-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object […]

Read more
SLES 15 — bluez — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bluez — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9413 (see also SUSE bugzilla) Related CVEs: CVE-2023-50229 CVE-2023-50230 CVE-2023-27349 CVE-2022-39176 CVE-2022-0204 CVE-2019-8921 CVE-2019-8922 CVE-2023-45866  +12 more Upstream summary: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This […]

Read more
SLES 15 — python2-Mako — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-Mako — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:496-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40023 Upstream summary: Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects […]

Read more
SLES 15 — graphviz — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — graphviz — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 9 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1646-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18032 CVE-2023-46045 CVE-2018-10196 CVE-2019-11023 Upstream summary: Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary […]

Read more
SLES 15 — python2-wheel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-wheel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:158-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40898 Upstream summary: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via […]

Read more
SLES 15 — kubernetes1.18-client — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — kubernetes1.18-client — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:322-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3121 CVE-2023-2727 CVE-2023-2728 Upstream summary: An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue. […]

Read more
How to Set Up Fluentd on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up Fluentd on SLES 15

Introduction This tutorial covers How to Set Up Fluentd on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh […]

Read more
SLES 15 — python2-Flask — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-Flask — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30861 CVE-2018-1000656 Upstream summary: Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended […]

Read more
CHAT