SUSE Updates
1920Warning Date
Severity Level
Warning Number
Target Sector
27 December, 2020
● High
2020-2253
All
Description:
SUSE has released security updates to address several vulnerabilities in the following products:
- flac
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP3
- SUSE Linux Enterprise Module for Basesystem 15-SP2
- SUSE Linux Enterprise Module for Basesystem 15-SP1
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- openexr
- SUSE Linux Enterprise Module for Desktop Applications 15-SP2
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- MozillaThunderbird
- SUSE Linux Enterprise Workstation Extension 15-SP2
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Execute arbitrary code
- Buffer overflow
- Memory leak
Best practice and Recommendations:
The CERT team encourages users to review SUSE security advisory and apply the necessary updates: