SUSE has released security updates to address several vulnerabilities in the following products:

• libslirp
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-SP4
  • SUSE Linux Enterprise Micro 5.1
  • SUSE Linux Enterprise Micro 5.2
  • SUSE Linux Enterprise Module for Server Applications 15-SP3
  • SUSE Linux Enterprise Module for Server Applications 15-SP4
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server 15-SP4
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
• SUSE Linux Enterprise Server for SAP Applications 15-SP4
  • SUSE Manager Proxy 4.2
  • SUSE Manager Server 4.2
  • openSUSE Leap 15.3
  • openSUSE Leap 15.4
• nodejs12
  • SUSE Linux Enterprise High Performance Computing 12
  • SUSE Linux Enterprise Module for Web Scripting 12
  • SUSE Linux Enterprise Server 12
  • SUSE Linux Enterprise Server 12-SP3
  • SUSE Linux Enterprise Server 12-SP4
  • SUSE Linux Enterprise Server 12-SP5
  • SUSE Linux Enterprise Server for SAP Applications 12
  • SUSE Linux Enterprise Server for SAP Applications 12-SP3
  • SUSE Linux Enterprise Server for SAP Applications 12-SP4
  • SUSE Linux Enterprise Server for SAP Applications 12-SP5
• mariadb
  • openSUSE Leap 15.4

An attacker could exploit these vulnerabilities by doing the following:

• Denial of Service (DoS) attack
• Information disclosure

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

• https://www.suse.com/support/update/announcement/2022/suse-su-20221465-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20221466-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20220731-2/