SLES

SLES 12 — aws-efs-utils — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — aws-efs-utils — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 November 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0423-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46174 Upstream summary: efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS […]

Read more
SLES 12 — bcel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — bcel — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 November 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4306-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-42920 Upstream summary: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds […]

Read more
SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2423-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36113 CVE-2022-36114 Upstream summary: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in […]

Read more
SLES 12 — syslog-ng — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — syslog-ng — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0319-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-38725 CVE-2020-8019 CVE-2011-0343 CVE-2011-1951 Upstream summary: An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause […]

Read more
SLES 12 — gdb — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — gdb — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 November 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3179-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48064 CVE-2019-1010180 CVE-2017-16829 CVE-2018-7208 Upstream summary: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. […]

Read more
SLES 12 — libvirglrenderer0 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libvirglrenderer0 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 October 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0016-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18389 CVE-2019-18391 CVE-2022-0135 CVE-2019-18388 CVE-2019-18390 CVE-2022-0175 CVE-2016-10214 CVE-2017-5580  +11 more Upstream summary: A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through […]

Read more
SLES 15 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — kernel-docs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 30 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:019 (see also SUSE bugzilla) Related CVEs: CVE-2011-1180 CVE-2022-2991 CVE-2021-39713 CVE-2020-0433 CVE-2021-0935 CVE-2021-23133 CVE-2018-25020 CVE-2020-0429  +12 more Upstream summary: Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux […]

Read more
SLES 15 — perl-HTTP-Daemon — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-HTTP-Daemon — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2872-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31081 Upstream summary: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially […]

Read more
SLES 12 — hsqldb — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — hsqldb — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 October 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3823-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41853 Upstream summary: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. […]

Read more
CHAT