SLES

SLES 15 — kubernetes-client — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — kubernetes-client — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:783-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15106 CVE-2020-15112 CVE-2020-8557 CVE-2020-8565 CVE-2020-8566 CVE-2020-15184 CVE-2020-15185 CVE-2020-15186  +1 more Upstream summary: In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in […]

Read more
SLES 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 November 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1765-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16301 CVE-2020-8037 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2016-7922 CVE-2016-7923  +12 more Upstream summary: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in […]

Read more
SLES 15 — python2-M2Crypto — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-M2Crypto — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2024:1448-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25657 Upstream summary: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption […]

Read more
SLES 15 — libwebp6 — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libwebp6 — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 31 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1830-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-25011 CVE-2018-25014 CVE-2018-25009 CVE-2018-25010 CVE-2018-25012 CVE-2018-25013 CVE-2020-36328 CVE-2020-36331  +5 more Upstream summary: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in […]

Read more
SLES 15 — libjpeg8 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libjpeg8 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1957-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-17541 CVE-2019-2201 CVE-2020-35538 CVE-2018-19644 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813  +4 more Upstream summary: Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A […]

Read more
SLES 12 — ipmitool — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — ipmitool — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0405-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-5208 Upstream summary: It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, […]

Read more
SLES 15 — groovy-lib — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — groovy-lib — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3917-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-17521 Upstream summary: Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was […]

Read more
SLES 15 — hplip — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — hplip — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:0270-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-6923 CVE-2010-4267 CVE-2011-2697 CVE-2013-4325 CVE-2013-6402 CVE-2013-6427 CVE-2015-0839 CVE-2004-0801  +1 more Upstream summary: The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by […]

Read more
SLES 15 — gssproxy — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — gssproxy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1029-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12658 Upstream summary: gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We […]

Read more
SLES 12 — hplip — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — hplip — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 October 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:0270-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-6923 CVE-2010-4267 CVE-2011-2697 CVE-2013-4325 CVE-2013-6402 CVE-2013-6427 CVE-2015-0839 CVE-2004-0801  +1 more Upstream summary: The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by […]

Read more
CHAT