SLES

SLES 15 — libconfuse0 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libconfuse0 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3331-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40320 Upstream summary: cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 15 — libinput10 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libinput10 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1305-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1215 Upstream summary: A format string vulnerability was found in libinput Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
SLES 15 — libpcre2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libpcre2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1680-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1587 CVE-2022-41409 CVE-2019-20454 CVE-2017-8786 Upstream summary: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This […]

Read more
SLES 12 — liblz4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — liblz4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 17 October 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2023:3956-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15180 CVE-2021-46669 CVE-2022-27380 CVE-2022-27376 CVE-2022-27377 CVE-2022-27378 CVE-2022-27379 CVE-2022-27381  +12 more Upstream summary: A flaw was found in the mysql-wsrep component of mariadb. Lack of input […]

Read more
SLES 12 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 October 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0777-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5662 CVE-2022-44729 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890  +2 more Upstream summary: In Apache Batik before 1.9, files lying on the filesystem of the server […]

Read more
SLES 15 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xmlgraphics-batik — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0777-1 Related CVEs: CVE-2022-44729 CVE-2020-11988 CVE-2022-41704 CVE-2022-42890 CVE-2022-44730 CVE-2019-17566 CVE-2020-11987 CVE-2022-38398  +2 more Upstream summary: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML […]

Read more
SLES 15 — cifs-utils — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cifs-utils — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 October 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:1047-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29869 CVE-2022-27239 CVE-2012-1586 CVE-2020-14342 CVE-2021-20208 Upstream summary: cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) […]

Read more
SLES 15 — libdpdk — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libdpdk — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 September 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4050-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-32166 Upstream summary: In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead […]

Read more
SLES 12 — kernel-default-extra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — kernel-default-extra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2960-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45919 CVE-2022-41218 Upstream summary: An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect […]

Read more
CHAT