SLES

SLES 15 — cryptctl — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — cryptctl — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 18 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2136-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18906 Upstream summary: A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access […]

Read more
SLES 15 — fuse3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — fuse3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3470-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-10152 CVE-2018-15664 Upstream summary: A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An […]

Read more
SLES 15 — libqt5-qtimageformats — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libqt5-qtimageformats — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0705-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19871 Upstream summary: An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. Table of contents Symptom & Impact Environment & […]

Read more
SLES 15 — pam_yubico — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pam_yubico — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-9275 Upstream summary: In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the […]

Read more
SLES 12 — unixODBC — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — unixODBC — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 16 July 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:719-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7409 CVE-2018-7485 CVE-2011-1145 Upstream summary: In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c. Table of contents Symptom & […]

Read more
SLES 12 — memcached — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — memcached — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2020:2072-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11596 CVE-2019-15026 CVE-2009-1494 CVE-2011-4971 CVE-2013-7239 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706  +5 more Upstream summary: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru […]

Read more
SLES 15 — liblzo2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — liblzo2 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0904-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-4607 Upstream summary: Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to […]

Read more
SLES 12 — libshibsp6 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libshibsp6 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:3386-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19191 CVE-2017-16852 Upstream summary: Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by […]

Read more
SLES 15 — opencc — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — opencc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 July 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4288-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16982 Upstream summary: Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds […]

Read more
CHAT