Security Warnings

Classification
These posts contain security warnings, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

● High

Zoom Update

● Critical

Security issues in the Mail App on iPhone and iPad

● Critical

Cisco’s Webex Phishing Campaigns

● Critical

Microsoft Updates

● High

Apple Updates

● Critical

SUSE Updates

76

Warning Date: 13 January, 2021

Severity Level ● Medium

Warning Number: 2021-2313

Target Sector: All

Description:

SUSE has released security updates to address multiple vulnerabilities in the following products:

  • nodejs10
    • SUSE Linux Enterprise Server for SAP 15
    • SUSE Linux Enterprise Server 15-LTSS
    • SUSE Linux Enterprise Module for Web Scripting 15-SP2
    • SUSE Linux Enterprise Module for Web Scripting 15-SP1
    • SUSE Linux Enterprise High Performance Computing 15-LTSS
    • SUSE Linux Enterprise Module for Web Scripting 15-SP2
  • nodejs14
    • SUSE Linux Enterprise High Performance Computing 15-ESPOS
  • nodejs12
    • SUSE Linux Enterprise Module for Web Scripting 15-SP2
    • SUSE Linux Enterprise Module for Web Scripting 12

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Denial of service (DoS)
  • Arbitrary code execution

Best practice and Recommendations:

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

Last updated at 13 January, 2021