تحديثات SUSE
2592تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
27 سبتمبر, 2020
● عالي
2020-1840
الكل
الوصف:
أصدرت SUSE عدّة تحديثات لمعالجة عددٍ من الثغرات في المنتجات التالية:
- MozillaFirefox
- SUSE OpenStack Cloud Crowbar 9
- SUSE OpenStack Cloud Crowbar 8
- SUSE OpenStack Cloud 9
- SUSE OpenStack Cloud 8
- SUSE OpenStack Cloud 7
- SUSE Linux Enterprise Software Development Kit 12-SP5
- SUSE Linux Enterprise Server for SAP 12-SP4
- SUSE Linux Enterprise Server for SAP 12-SP3
- SUSE Linux Enterprise Server for SAP 12-SP2
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 12-SP4-LTSS
- SUSE Linux Enterprise Server 12-SP3-LTSS
- SUSE Linux Enterprise Server 12-SP3-BCL
- SUSE Linux Enterprise Server 12-SP2-LTSS
- SUSE Linux Enterprise Server 12-SP2-BCL
- SUSE Enterprise Storage 5
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- libqt5-qtbase
- SUSE OpenStack Cloud Crowbar 9
- SUSE OpenStack Cloud Crowbar 8
- SUSE OpenStack Cloud 9
- SUSE OpenStack Cloud 8
- SUSE Linux Enterprise Software Development Kit 12-SP5
- SUSE Linux Enterprise Server for SAP 12-SP4
- SUSE Linux Enterprise Server for SAP 12-SP3
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 12-SP4-LTSS
- SUSE Linux Enterprise Server 12-SP3-LTSS
- SUSE Linux Enterprise Server 12-SP3-BCL
- SUSE Enterprise Storage 5
- HPE Helion Openstack 8
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise Module for Desktop Applications 15-SP2
- SUSE Linux Enterprise Module for Basesystem 15-SP2
- ImageMagick
- SUSE Linux Enterprise Workstation Extension 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP5
- SUSE Linux Enterprise Server 12-SP5
- tiff
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1
- SUSE Linux Enterprise Module for Desktop Applications 15-SP2
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP2
- SUSE Linux Enterprise Module for Basesystem 15-SP1
- qemu
- SUSE Linux Enterprise Server 12-SP5
- bcm43xx-firmware
- SUSE Linux Enterprise Module for Basesystem 15-SP2
- conmon, fuse-overlayfs, libcontainers-common, podman
- SUSE Linux Enterprise Module for Containers 15-SP2
- SUSE Linux Enterprise Module for Containers 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP2
- SUSE Linux Enterprise Module for Basesystem 15-SP1
التهديدات:
يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:
- تجاوز سعة مخزن الذاكرة المؤقت
- هجمة حجب الخدمة (DoS)
- تنفيذ برمجيات خبيثة
الإجراءات الوقائية:
يوصي المركز بتحديث المنتجات المتأثرة، حيث أصدرت SUSE توضيحًا لهذه التحديثات:
- https://www.suse.com/support/update/announcement/2020/suse-su-20202759-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202751-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202750-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202748-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202747-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202744-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202742-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202741-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202733-1/
- https://www.suse.com/support/update/announcement/2020/suse-su-20202731-1/