# SLES 9 SP4 Nessus scan vulnerabilities **URL:** \ **Category:** SLES Updates\ **Created:** [August 14, 2012, 12:30am UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962 "2012-08-14T00:30:56Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![ztenj](https://avatars.discourse-cdn.com/v4/letter/z/3da27b/32.png) [@ztenj](https://forums.suse.com/u/ztenj)\ **Post date:** [August 14, 2012, 12:30am UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962/1 "2012-08-14T00:30:56Z")
Hello we have some servers without internet access, in which we run a Nessus security scan and in the result of the scan we got around 200 vulnerabilities between high and medium severity, most of them have a recomended solution in which a certain YOU patch number should be installed. After checking all the vulnerabilities I found out that I have to install 225 patches. where could I download this patches? and is there a way to download this patches as a bulk/point release/service pack etc?? an example of the patches that nessus recoments to download are the following: SuSE9 Security Update : Samba (YOU Patch Number 12622) SuSE9 Security Update : Samba (YOU Patch Number 12644) SuSE9 Security Update : Samba (YOU Patch Number 12812) SuSE9 Security Update : sendmail (YOU Patch Number 12590) SuSE9 Security Update : squid (YOU Patch Number 12004) SuSE9 Security Update : squid (YOU Patch Number 12135) SuSE9 Security Update : squid (YOU Patch Number 12597) SuSE9 Security Update : tar (YOU Patch Number 12596) SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578) SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646) SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672) Thanks ---
**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\ **Post date:** [August 14, 2012, 1:00am UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962/2 "2012-08-14T01:00:45Z")
> [@ztenj](#): > > Hello we have some servers without internet access, in which we run a > Nessus security scan and in the result of the scan we got around 200 > vulnerabilities between high and medium severity, most of them have a > recomended solution in which a certain YOU patch number should be > installed. > > After checking all the vulnerabilities I found out that I have to > install 225 patches. where could I download this patches? and is there a > way to download this patches as a bulk/point release/service pack etc?? > > an example of the patches that nessus recoments to download are the > following: > SuSE9 Security Update : Samba (YOU Patch Number 12622) > SuSE9 Security Update : Samba (YOU Patch Number 12644) > SuSE9 Security Update : Samba (YOU Patch Number 12812) > SuSE9 Security Update : sendmail (YOU Patch Number 12590) > SuSE9 Security Update : squid (YOU Patch Number 12004) > SuSE9 Security Update : squid (YOU Patch Number 12135) > SuSE9 Security Update : squid (YOU Patch Number 12597) > SuSE9 Security Update : tar (YOU Patch Number 12596) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672) > > Thanks Hi All the patches are here: [http://download.novell.com/patch/psdb/](http://download.novell.com/patch/psdb/) if you have an active subscription, shouldn’t be a problem to download. I don’t think there is an easier way except manually. – Cheers Malcolm °¿° (Linux Counter #276890) SUSE Linux Enterprise Desktop 11 (x86\_64) Kernel 3.0.34-0.7-default up 15 days 18:32, 2 users, load average: 0.49, 0.55, 0.50 CPU Intel i5 CPU M520@2.40GHz | Intel Arrandale GPU ---
**Author:** ![dirkmueller](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/dirkmueller/32/11354_2.png) [@dirkmueller](https://forums.suse.com/u/dirkmueller)\ **Post date:** [August 24, 2012, 11:27am UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962/3 "2012-08-24T11:27:57Z")
The easiest way would be to run YaST2 and select “System Update”. ---
**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\ **Post date:** [August 24, 2012, 3:40pm UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962/4 "2012-08-24T15:40:37Z")
On 24/08/2012 09:34, dirkmueller wrote: [color=blue] > The easiest way would be to run YaST2 and select “System Update”.[/color] ## Not if the OP has some servers without internet access … Simon Novell/SUSE/NetIQ Knowledge Partner * * * ## Do you work with Novell technologies at a university, college or school? If so, your campus could benefit from joining the Novell Technology Transfer Partner (TTP) program. See [novell.com/ttp](http://novell.com/ttp) for more details. ---
**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\ **Post date:** [August 24, 2012, 3:45pm UTC](https://forums.suse.com/t/sles-9-sp4-nessus-scan-vulnerabilities/22962/5 "2012-08-24T15:45:20Z")
On 13/08/2012 22:34, ztenj wrote: [color=blue] > Hello we have some servers without internet access, in which we run a > Nessus security scan and in the result of the scan we got around 200 > vulnerabilities between high and medium severity, most of them have a > recomended solution in which a certain YOU patch number should be > installed. > > After checking all the vulnerabilities I found out that I have to > install 225 patches. where could I download this patches? and is there a > way to download this patches as a bulk/point release/service pack etc?? > > an example of the patches that nessus recoments to download are the > following: > SuSE9 Security Update : Samba (YOU Patch Number 12622) > SuSE9 Security Update : Samba (YOU Patch Number 12644) > SuSE9 Security Update : Samba (YOU Patch Number 12812) > SuSE9 Security Update : sendmail (YOU Patch Number 12590) > SuSE9 Security Update : squid (YOU Patch Number 12004) > SuSE9 Security Update : squid (YOU Patch Number 12135) > SuSE9 Security Update : squid (YOU Patch Number 12597) > SuSE9 Security Update : tar (YOU Patch Number 12596) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646) > SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672)[/color] Presumably these servers do have network access and since you say some servers don’t that implies at least one server does so internet access is available? If that’s the case then why not set up a local patch server that can access patches via the internet and which your local servers can then pull patches from? You could use SUSE’s SMT product to handle this for you. ## HTH. Simon Novell/SUSE/NetIQ Knowledge Partner * * * ## Do you work with Novell technologies at a university, college or school? If so, your campus could benefit from joining the Novell Technology Transfer Partner (TTP) program. See [novell.com/ttp](http://novell.com/ttp) for more details.