SLES 15

How to Configure MySQL Replication on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure MySQL Replication on SLES 15

Introduction This tutorial covers How to Configure MySQL Replication on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh […]

Read more
SLES 15 — ruby2.5-rubygem-activejob — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5-rubygem-activejob — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2019:1820-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16476 Upstream summary: A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active […]

Read more
SLES 15 — clamsap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — clamsap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:0805-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-2278 CVE-2015-2282 Upstream summary: The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server […]

Read more
SLES 15 — python2-pywbem — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-pywbem — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0580-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6418 Upstream summary: PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an […]

Read more
SLES 15 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 27 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2018-11307 CVE-2018-14718 CVE-2018-14721 CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 CVE-2018-7489 CVE-2019-14379  +12 more Upstream summary: An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with […]

Read more
SLES 15 — evolution — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — evolution — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1266-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15587 Upstream summary: GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a […]

Read more
SLES 15 — perl-File-Find-Rule — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-File-Find-Rule — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9517 (see also SUSE bugzilla) Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened […]

Read more
SLES 15 — yast2-samba-provision — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-samba-provision — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3199-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17956 Upstream summary: In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used […]

Read more
SLES 15 — cron — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cron — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2006:027 (see also SUSE bugzilla) Related CVEs: CVE-2006-2607 CVE-2010-0424 CVE-2019-9704 CVE-2019-9705 Upstream summary: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow […]

Read more
SLES 15 — libdb — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libdb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3135-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2708 Upstream summary: Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 […]

Read more
CHAT