SLES 15

SLES 15 — libsbc1 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libsbc1 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2125-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22191 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2021-22173 CVE-2021-22174  +1 more Upstream summary: Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could […]

Read more
How to Enable Brotli Compression in Nginx on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Enable Brotli Compression in Nginx on SLES 15

Introduction This tutorial covers How to Enable Brotli Compression in Nginx on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
SLES 15 — jsoup — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — jsoup — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3027-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36033 Upstream summary: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML […]

Read more
SLES 15 — python2-paramiko — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-paramiko — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can […]

Read more
SLES 15 — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0019-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44640 CVE-2009-1886 CVE-2020-17049 CVE-2010-3069 CVE-2012-0870 CVE-2012-1182 CVE-2013-4408 CVE-2015-8467  +12 more Upstream summary: Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an […]

Read more
SLES 15 — tk — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — tk — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0484-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-35331 Upstream summary: In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute […]

Read more
SLES 15 — libswscale5_9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libswscale5_9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-33815 CVE-2019-11338 CVE-2019-11339 CVE-2019-15942 CVE-2018-7751 CVE-2020-35964 Upstream summary: dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. […]

Read more
SLES 15 — apache-sshd — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — apache-sshd — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 8 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0224-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45047 Upstream summary: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several […]

Read more
How to Configure kubectl on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure kubectl on SLES 15

Introduction This tutorial covers How to Configure kubectl on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh && […]

Read more
How to Set Up SSH Two-Factor Authentication on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up SSH Two-Factor Authentication on SLES 15

Introduction This tutorial covers How to Set Up SSH Two-Factor Authentication on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
CHAT