الوصف:

أصدرت SUSE عدّة تحديثات لمعالجة عددٍ من الثغرات في المنتجات التالية:

• cobbler
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.2
  • SUSE Manager Server 4.2
  • SUSE Linux Enterprise Server 11-SP3-CLIENT-TOOLS
  • SUSE Linux Enterprise Server 11-SP4-CLIENT-TOOLS
  • HPE Helion Openstack 8
  • SUSE Manager Tools 12
  • SUSE OpenStack Cloud 8
  • SUSE OpenStack Cloud 9
• tcpdump
  • SUSE Linux Enterprise Debuginfo 11-SP3
  • SUSE Linux Enterprise Debuginfo 11-SP4
  • SUSE Linux Enterprise Point of Sale 11-SP3
  • SUSE Linux Enterprise Server 11-SP4-LTSS
  • HPE Helion Openstack 8
  • SUSE Linux Enterprise Server 12-SP2-BCL
  • SUSE Linux Enterprise Server 12-SP3-BCL
  • SUSE Linux Enterprise Server 12-SP3-LTSS
  • SUSE Linux Enterprise Server 12-SP4-LTSS
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server for SAP 12-SP3
  • SUSE Linux Enterprise Server for SAP 12-SP4
  • SUSE OpenStack Cloud 8
  • SUSE OpenStack Cloud 9
  • SUSE OpenStack Cloud Crowbar 8
  • SUSE OpenStack Cloud Crowbar 9
• wpa_supplicant
  • SUSE Linux Enterprise Server 12-SP5
• xerces-j2
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise Desktop 15-SP3
  • SUSE Linux Enterprise Desktop 15-SP4
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-SP4
  • SUSE Linux Enterprise Module for Basesystem 15-SP3
  • SUSE Linux Enterprise Module for Basesystem 15-SP4
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server 15-SP4
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Linux Enterprise Server for SAP Applications 15-SP4
  • SUSE Manager Proxy 4.1
  • SUSE Manager Proxy 4.2
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Manager Server 4.2
  • SUSE Linux Enterprise Point of Sale 11-SP3
  • SUSE Linux Enterprise Server 11-SP4-LTSS
  • SUSE CaaS Platform 4.0
  • SUSE Enterprise Storage 6
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Server 15-SP1-BCL
  • SUSE Linux Enterprise Server 15-SP1-LTSS
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server for SAP 15-SP1
• ucode-intel
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise Server for SAP 15
• python-Twisted
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
  • SUSE Linux Enterprise Module for Server Applications 15-SP3
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Manager Proxy 4.1
  • SUSE Manager Proxy 4.2
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Manager Server 4.2
• expat
  • SUSE CaaS Platform 4.0
  • SUSE Enterprise Storage 6
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise Desktop 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise Micro 5.0
  • SUSE Linux Enterprise Micro 5.1
  • SUSE Linux Enterprise Module for Basesystem 15-SP3
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Server 15-SP1-BCL
  • SUSE Linux Enterprise Server 15-SP1-LTSS
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server for SAP 15-SP1
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Manager Proxy 4.1
  • SUSE Manager Proxy 4.2
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Manager Server 4.2
• tiff
  • SUSE Linux Enterprise Debuginfo 11-SP3
  • SUSE Linux Enterprise Debuginfo 11-SP4
  • SUSE Linux Enterprise Point of Sale 11-SP3
  • SUSE Linux Enterprise Server 11-SP4-LTSS
  • HPE Helion Openstack 8
  • SUSE Linux Enterprise Server 12-SP2-BCL
  • SUSE Linux Enterprise Server 12-SP3-BCL
  • SUSE Linux Enterprise Server 12-SP3-LTSS
  • SUSE Linux Enterprise Server 12-SP4-LTSS
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server for SAP 12-SP3
  • SUSE Linux Enterprise Server for SAP 12-SP4
  • SUSE Linux Enterprise Server for SAP Applications 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE OpenStack Cloud 8
  • SUSE OpenStack Cloud 9
  • SUSE OpenStack Cloud Crowbar 8
  • SUSE OpenStack Cloud Crowbar 9
• expat
  • HPE Helion Openstack 8
  • SUSE Linux Enterprise Server 12-SP2-BCL
  • SUSE Linux Enterprise Server 12-SP3-BCL
  • SUSE Linux Enterprise Server 12-SP3-LTSS
  • SUSE Linux Enterprise Server 12-SP4-LTSS
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server for SAP 12-SP3
  • SUSE Linux Enterprise Server for SAP 12-SP4
  • SUSE Linux Enterprise Server for SAP Applications 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE OpenStack Cloud 8
  • SUSE OpenStack Cloud 9
  • SUSE OpenStack Cloud Crowbar 8
  • SUSE OpenStack Cloud Crowbar 9
• strongswan
  • SUSE Linux Enterprise Debuginfo 11-SP3
  • SUSE Linux Enterprise Debuginfo 11-SP4
  • SUSE Linux Enterprise Point of Sale 11-SP3
  • SUSE Linux Enterprise Server 11-SP4-LTSS
• clamav
  • SUSE CaaS Platform 4.0
  • SUSE Enterprise Storage 6
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise Desktop 15-SP3
  • SUSE Linux Enterprise Desktop 15-SP4
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-SP4
  • SUSE Linux Enterprise Module for Basesystem 15-SP3
  • SUSE Linux Enterprise Module for Basesystem 15-SP4
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Server 15-SP1-BCL
  • SUSE Linux Enterprise Server 15-SP1-LTSS
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server 15-SP4
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server for SAP 15-SP1
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Linux Enterprise Server for SAP Applications 15-SP4
  • SUSE Manager Proxy 4.1
  • SUSE Manager Proxy 4.2
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Manager Server 4.2
• strongswan
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise Desktop 15-SP3
  • SUSE Linux Enterprise Desktop 15-SP4
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-SP4
  • SUSE Linux Enterprise Module for Basesystem 15-SP3
  • SUSE Linux Enterprise Module for Basesystem 15-SP4
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server 15-SP4
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Linux Enterprise Server for SAP Applications 15-SP4
  • SUSE Linux Enterprise Workstation Extension 15-SP3
  • SUSE Linux Enterprise Workstation Extension 15-SP4
  • SUSE Manager Proxy 4.1
  • SUSE Manager Proxy 4.2
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
  • SUSE Manager Server 4.2
• rust
  • SUSE CaaS Platform 4.0
  • SUSE Enterprise Storage 6
  • SUSE Enterprise Storage 7
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
  • SUSE Linux Enterprise Realtime Extension 15-SP2
  • SUSE Linux Enterprise Server 15-SP1-BCL
  • SUSE Linux Enterprise Server 15-SP1-LTSS
  • SUSE Linux Enterprise Server 15-SP2-BCL
  • SUSE Linux Enterprise Server 15-SP2-LTSS
  • SUSE Linux Enterprise Server for SAP 15-SP1
  • SUSE Linux Enterprise Server for SAP 15-SP2
  • SUSE Manager Proxy 4.1
  • SUSE Manager Retail Branch Server 4.1
  • SUSE Manager Server 4.1
• libmspack
  • SUSE Linux Enterprise Realtime Extension 15-SP2
• qemu
  • SUSE Linux Enterprise Realtime Extension 15-SP2
• python-numpy
  • SUSE Linux Enterprise Realtime Extension 15-SP2

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• تجاوز سعة مخزن الذاكرة المؤقت
• تنفيذ برمجيات خبيثة

الاجراءات الوقائية:

يوصي المركز بتحديث المنتجات المتأثرة، حيث أصدرت SUSE توضيحًا لهذه التحديثات:

• https://www.suse.com/support/update/announcement/2022/suse-su-20220510-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220509-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-202214891-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220507-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-202214890-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220505-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220504-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220503-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220502-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-202214889-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220500-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220499-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220498-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-202214888-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220495-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-202214887-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220493-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220492-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220491-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220069-2/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220210-2/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220134-2/