SUSE Updates
2946Warning Date
Severity Level
Warning Number
Target Sector
24 March, 2020
● Medium
2020-1054
All
Description:
SUSE has released security updates to address vulnerabilities in the following products:
- strongswan
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP1
- python36
- SUSE Linux Enterprise Server 12-SP5
- cloud-init
- SUSE Linux Enterprise Module for Public Cloud 15-SP1
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
- postgresql10
- SUSE Linux Enterprise Module for Server Applications 15-SP1
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP1
Threats:
Attacker could exploit these vulnerabilities by causing the following:
- Bypass of a protection mechanism
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review SUSE security advisory and apply the necessary updates: