SUSE Updates
3122Warning Date
Severity Level
Warning Number
Target Sector
4 February, 2020
● Critical
2020-874
All
Description:
SUSE has released security updates to address multiple vulnerabilities in the following products:
- SUSE OpenStack Cloud 7
- python36
- SUSE Linux Enterprise Server 12-SP5
- crowbar-core
- crowbar-openstack
- openstack-neutron-fwaas
- rubygem-crowbar-client
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service (DoS) attack.
- Crowbar was leaking the secret admin passwords to all nodes.
Best practice and Recommendations:
The CERT team encourages users to review SUSE security advisory and apply the necessary updates: