SLES

SLES 12 — libgadu3 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libgadu3 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3775 Upstream summary: libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause […]

Read more
SLES 12 — apache-commons-httpclient — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — apache-commons-httpclient — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3149-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5262 CVE-2014-3577 CVE-2012-5783 Upstream summary: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers […]

Read more
SLES 12 — sysconfig — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — sysconfig — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0096-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-4182 Upstream summary: Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. […]

Read more
SLES 12 — logwatch — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — logwatch — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-1018 Upstream summary: logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via […]

Read more
SLES 12 — libXfont1 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libXfont1 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0774-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0210 CVE-2014-0211 CVE-2011-2895 CVE-2013-6462 CVE-2014-0209 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804  +2 more Upstream summary: Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow […]

Read more
SLES 12 — lib3ds — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — lib3ds — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 28 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2010-0280 Upstream summary: Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of […]

Read more
SLES 12 — facter — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — facter — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0880-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3248 Upstream summary: Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before […]

Read more
SLES 12 — pam_ssh — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — pam_ssh — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-1273 Upstream summary: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the […]

Read more
SLES 12 — checkbashisms — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — checkbashisms — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2012-2240 CVE-2014-1833 CVE-2012-2241 CVE-2012-3500 Upstream summary: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." Table of […]

Read more
CHAT