SLES 15

SLES 15 — libconfuse0 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libconfuse0 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3331-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40320 Upstream summary: cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 15 — libinput10 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libinput10 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1305-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1215 Upstream summary: A format string vulnerability was found in libinput Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
SLES 15 — libpcre2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libpcre2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1680-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1587 CVE-2022-41409 CVE-2019-20454 CVE-2017-8786 Upstream summary: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This […]

Read more
Initial Server Setup with SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

Initial Server Setup with SLES 15

Introduction This tutorial covers Initial Server Setup with SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites A fresh SLES 15 installation with root or sudo access is required. Ensure […]

Read more
How to Configure Kubernetes RBAC on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure Kubernetes RBAC on SLES 15

Introduction This tutorial covers How to Configure Kubernetes RBAC on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Disable Swap swapoff -a sed -i ‘/ swap / […]

Read more
SLES 15 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0777-1 Related CVEs: CVE-2022-44729 CVE-2020-11988 CVE-2022-41704 CVE-2022-42890 CVE-2022-44730 CVE-2019-17566 CVE-2020-11987 CVE-2022-38398  +2 more Upstream summary: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML […]

Read more
SLES 15 — cifs-utils — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cifs-utils — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:1047-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29869 CVE-2022-27239 CVE-2012-1586 CVE-2020-14342 CVE-2021-20208 Upstream summary: cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) […]

Read more
SLES 15 — libdpdk — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libdpdk — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 September 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4050-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-32166 Upstream summary: In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead […]

Read more
How to Install Redis on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install Redis on SLES 15

Introduction This tutorial covers How to Install Redis on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Redis zypper install -y redis Step 2 — Enable […]

Read more
CHAT