SLES 15

SLES 15 — python2-azure-core — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-azure-core — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30187 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

Read more
SLES 15 — apache2-mod_wsgi — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — apache2-mod_wsgi — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2015:0611-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0240 CVE-2022-2255 Upstream summary: The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid […]

Read more
SLES 15 — patch — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — patch — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1338-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13636 CVE-2010-4651 CVE-2015-1196 CVE-2016-10713 CVE-2018-1000156 CVE-2021-45261 CVE-2019-20633 CVE-2018-6952  +1 more Upstream summary: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain […]

Read more
SLES 15 — snakeyaml — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — snakeyaml — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3397-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVE-2017-18640 CVE-2022-25857 Upstream summary: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If […]

Read more
How to Upgrade SLES 15 to SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Upgrade SLES 15 to SLES 15

Introduction This tutorial covers How to Upgrade SLES 15 to SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Back Up Your System Take a snapshot or backup […]

Read more
SLES 15 — xmlbeans — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xmlbeans — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-23926 Upstream summary: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious […]

Read more
SLES 15 — xom — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xom — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. […]

Read more
SLES 15 — libtcmu2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libtcmu2 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:69-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3139 Upstream summary: In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to […]

Read more
How to Configure Traefik Reverse Proxy on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure Traefik Reverse Proxy on SLES 15

Introduction This tutorial covers How to Configure Traefik Reverse Proxy on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more
How to Set Up a Multi-Node Kubernetes Cluster on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up a Multi-Node Kubernetes Cluster on SLES 15

Introduction This tutorial covers How to Set Up a Multi-Node Kubernetes Cluster on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Disable Swap swapoff -a sed -i […]

Read more
CHAT