أصدرت SUSE عدّة تحديثات لمعالجة عددٍ من الثغرات في المنتجات التالية:

• libconfuse0
• SUSE Linux Enterprise Module for HPC 12
• oniguruma
• SUSE CaaS Platform 4.0
• SUSE Enterprise Storage 6
• SUSE Enterprise Storage 7
• SUSE Linux Enterprise Desktop 15-SP3
• SUSE Linux Enterprise Desktop 15-SP4
• SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
• SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
• SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
• SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
• SUSE Linux Enterprise High Performance Computing 15-SP3
• SUSE Linux Enterprise High Performance Computing 15-SP4
• SUSE Linux Enterprise Micro 5.1
• SUSE Linux Enterprise Micro 5.2
• SUSE Linux Enterprise Module for Basesystem 15-SP3
• SUSE Linux Enterprise Module for Basesystem 15-SP4
• SUSE Linux Enterprise Server 15-SP1-BCL
• SUSE Linux Enterprise Server 15-SP1-LTSS
• SUSE Linux Enterprise Server 15-SP2-BCL
• SUSE Linux Enterprise Server 15-SP2-LTSS
• SUSE Linux Enterprise Server 15-SP3
• SUSE Linux Enterprise Server 15-SP4
• SUSE Linux Enterprise Server for SAP 15-SP1
• SUSE Linux Enterprise Server for SAP 15-SP2
• SUSE Linux Enterprise Server for SAP Applications 15-SP3
• SUSE Linux Enterprise Server for SAP Applications 15-SP4
• SUSE Linux Enterprise Storage 7.1
• SUSE Manager Proxy 4.1
• SUSE Manager Proxy 4.2
• SUSE Manager Proxy 4.3
• SUSE Manager Retail Branch Server 4.1
• SUSE Manager Retail Branch Server 4.2
• SUSE Manager Retail Branch Server 4.3
• SUSE Manager Server 4.1
• SUSE Manager Server 4.2
• SUSE Manager Server 4.3
• openSUSE Leap 15.3
• openSUSE Leap 15.4
• openSUSE Leap Micro 5.2
• go1.19
• SUSE Linux Enterprise Desktop 15-SP3
• SUSE Linux Enterprise Desktop 15-SP4
• SUSE Linux Enterprise High Performance Computing 15-SP3
• SUSE Linux Enterprise High Performance Computing 15-SP4
• SUSE Linux Enterprise Module for Development Tools 15-SP3
• SUSE Linux Enterprise Module for Development Tools 15-SP4
• SUSE Linux Enterprise Server 15-SP3
• SUSE Linux Enterprise Server 15-SP4
• SUSE Linux Enterprise Server for SAP Applications 15-SP3
• SUSE Linux Enterprise Server for SAP Applications 15-SP4
• SUSE Linux Enterprise Storage 7.1
• SUSE Manager Proxy 4.2
• SUSE Manager Proxy 4.3
• SUSE Manager Retail Branch Server 4.2
• SUSE Manager Retail Branch Server 4.3
• SUSE Manager Server 4.2
• SUSE Manager Server 4.3
• openSUSE Leap 15.3
• openSUSE Leap 15.
• go1.18
• SUSE Linux Enterprise Desktop 15-SP3
• SUSE Linux Enterprise Desktop 15-SP4
• SUSE Linux Enterprise High Performance Computing 15-SP3
• SUSE Linux Enterprise High Performance Computing 15-SP4
• SUSE Linux Enterprise Module for Development Tools 15-SP3
• SUSE Linux Enterprise Module for Development Tools 15-SP4
• SUSE Linux Enterprise Server 15-SP3
• SUSE Linux Enterprise Server 15-SP4
• SUSE Linux Enterprise Server for SAP Applications 15-SP3
• SUSE Linux Enterprise Server for SAP Applications 15-SP4
• SUSE Linux Enterprise Storage 7.1
• SUSE Manager Proxy 4.2
• SUSE Manager Proxy 4.3
• SUSE Manager Retail Branch Server 4.2
• SUSE Manager Retail Branch Server 4.3
• SUSE Manager Server 4.2
• SUSE Manager Server 4.3
• openSUSE Leap 15.3
• openSUSE Leap 15.4
• kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
• SUSE Linux Enterprise High Performance Computing 15-SP3
• SUSE Linux Enterprise Module for Containers 15-SP3
• SUSE Linux Enterprise Server 15-SP3
• SUSE Linux Enterprise Server for SAP Applications 15-SP3
• SUSE Linux Enterprise Storage 7.1
• SUSE Manager Proxy 4.2
• SUSE Manager Retail Branch Server 4.2
• SUSE Manager Server 4.2
• openSUSE Leap 15.3
• vsftpd
• SUSE Linux Enterprise High Performance Computing 15-SP4
• SUSE Linux Enterprise Module for Server Applications 15-SP4
• SUSE Linux Enterprise Server 15-SP4
• SUSE Linux Enterprise Server for SAP Applications 15-SP4
• SUSE Manager Proxy 4.3
• SUSE Manager Retail Branch Server 4.3
• SUSE Manager Server 4.3
• openSUSE Leap 15.4

يمكن للمهاجم استغلال هذه الثغرات وتنفيذ ما يلي:

• هجمة حجب الخدمة (DoS attack)
• تجاوز سعة مخزن الذاكرة المؤقت
• تنفيذ برمجيات خبيثة

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرت SUSE توضيحًا لهذه التحديثات:

• https://www.suse.com/support/update/announcement/2022/suse-su-20223331-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223326-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223325-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223321-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223320-1/