SLES 15

SLES 15 — permissions — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — permissions — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2345-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31252 CVE-2019-3687 CVE-2019-3690 CVE-2020-8013 Upstream summary: A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE […]

Read more
SLES 15 — hwloc-data — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — hwloc-data — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2022-47022 Upstream summary: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Table of […]

Read more
SLES 15 — python2-ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2134-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use […]

Read more
SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2423-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36113 CVE-2022-36114 Upstream summary: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in […]

Read more
How to Configure AppArmor on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure AppArmor on SLES 15

Introduction This tutorial covers How to Configure AppArmor on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Check AppArmor Status systemctl status apparmor aa-status Step 2 — […]

Read more
SLES 15 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 30 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:019 (see also SUSE bugzilla) Related CVEs: CVE-2011-1180 CVE-2022-2991 CVE-2021-39713 CVE-2020-0433 CVE-2021-0935 CVE-2021-23133 CVE-2018-25020 CVE-2020-0429  +12 more Upstream summary: Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux […]

Read more
SLES 15 — perl-HTTP-Daemon — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-HTTP-Daemon — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2872-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31081 Upstream summary: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially […]

Read more
How to Set Up Lynis Security Auditing on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up Lynis Security Auditing on SLES 15

Introduction This tutorial covers How to Set Up Lynis Security Auditing on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
How to Install Elasticsearch on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install Elasticsearch on SLES 15

Introduction This tutorial covers How to Install Elasticsearch on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh && […]

Read more
CHAT