الوصف:

أصدرت SUSE عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:

• xen
  • SUSE OpenStack Cloud 7
  • SUSE Linux Enterprise Server for SAP 12-SP2
  • SUSE Linux Enterprise Server 12-SP2-LTSS
  • SUSE Linux Enterprise Server 12-SP2-BCL
• systemd
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
  • SUSE Linux Enterprise Module for Basesystem 15-SP1
  • SUSE Linux Enterprise Module for Basesystem 15
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE Linux Enterprise Server 12-SP5
• libqt5-qtbase
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
  • SUSE Linux Enterprise Module for Desktop Applications 15-SP1
  • SUSE Linux Enterprise Module for Basesystem 15-SP1
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
  • SUSE Linux Enterprise Module for Desktop Applications 15
  • SUSE Linux Enterprise Module for Basesystem 15
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
• wicked
  • SUSE Linux Enterprise Module for Basesystem 15-SP1
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server for SAP 12-SP1
  • SUSE Linux Enterprise Server 12-SP1-LTSS
  • SUSE Linux Enterprise Server 12-SP4
  • SUSE Linux Enterprise Desktop 12-SP4
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Module for Basesystem 15
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
• nginx
  • SUSE Linux Enterprise Module for Server Applications 15-SP1
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
• php7
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP4
  • SUSE Linux Enterprise Module for Web Scripting 12
• pcp
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP4
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
  • SUSE Linux Enterprise Module for Development Tools 15
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
• rubygem-rack
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
  • SUSE Linux Enterprise High Availability 15-SP1
  • SUSE Linux Enterprise High Availability 15
• e2fsprogs
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP4
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server 12-SP4
  • SUSE Linux Enterprise Desktop 12-SP4
• LibreOffice
  • SUSE Linux Enterprise Workstation Extension 12-SP5
  • SUSE Linux Enterprise Workstation Extension 12-SP4
  • SUSE Linux Enterprise Software Development Kit 12-SP5
  • SUSE Linux Enterprise Software Development Kit 12-SP4
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server 12-SP4
• docker-runc
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
  • SUSE Linux Enterprise Module for Containers 15-SP1
  • SUSE Linux Enterprise Module for Containers 12
  • SUSE CaaS Platform 3.0

التهديدات:

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

• الكشف والإفصاح غير المصرح به للمعلومات
• هجمة حجب الخدمة (DoS attack)
• رفع الصلاحيات لزيادة قدرته على التعديل في النظام

الإجراءات الوقائية:

يوصي المركز بتحديث النسخ المتأثرة حيث أصدرتSUSE توضيحًا لهذه التحديثات:

• https://www.suse.com/support/update/announcement/2020/suse-su-20200334-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200335-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200346-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200347-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200348-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200349-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200351-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200352-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200353-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200355-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200356-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200357-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200358-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200359-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200360-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200369-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200370-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200372-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200375-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20200376-1/