SUSE Alert
2444Warning Date
Severity Level
Warning Number
Target Sector
4 May, 2022
● High
2022-4772
All
SUSE has released security updates to address several vulnerabilities in the following products:
- xen
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server for SAP Applications 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP5SUSE Linux Enterprise Desktop 15-SP3
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise Micro 5.1
- SUSE Linux Enterprise Micro 5.2
- SUSE Linux Enterprise Module for Basesystem 15-SP3
- SUSE Linux Enterprise Module for Server Applications 15-SP3
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- SUSE Manager Proxy 4.2
- SUSE Manager Server 4.2
- openSUSE Leap 15.3
- containerd, docker
- SUSE Linux Enterprise High Performance Computing 12
- SUSE Linux Enterprise Module for Containers 12
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 12-SP3
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server for SAP Applications 12
- SUSE Linux Enterprise Server for SAP Applications 12-SP3
- SUSE Linux Enterprise Server for SAP Applications 12-SP4
- SUSE Linux Enterprise Server for SAP Applications 12-SP5
- libcaca
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server for SAP Applications 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP5
- pcp
- openSUSE Leap 15.3
- openSUSE Leap 15.4
- amazon-ssm-agent
- SUSE Linux Enterprise High Performance Computing 15
- SUSE Linux Enterprise High Performance Computing 15-SP1
- SUSE Linux Enterprise High Performance Computing 15-SP2
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise High Performance Computing 15-SP4
- SUSE Linux Enterprise Module for Public Cloud 15
- SUSE Linux Enterprise Module for Public Cloud 15-SP1
- SUSE Linux Enterprise Module for Public Cloud 15-SP2
- SUSE Linux Enterprise Module for Public Cloud 15-SP3
- SUSE Linux Enterprise Module for Public Cloud 15-SP4
- SUSE Linux Enterprise Server 15
- SUSE Linux Enterprise Server 15-SP1
- SUSE Linux Enterprise Server 15-SP2
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server 15-SP4
- SUSE Linux Enterprise Server for SAP Applications 15
- SUSE Linux Enterprise Server for SAP Applications 15-SP1
- SUSE Linux Enterprise Server for SAP Applications 15-SP2
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- SUSE Linux Enterprise Server for SAP Applications 15-SP4
- SUSE Linux Enterprise Storage 6
- SUSE Linux Enterprise Storage 7
- SUSE Manager Proxy 4.0
- SUSE Manager Proxy 4.1
- SUSE Manager Proxy 4.2
- SUSE Manager Server 4.0
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- openSUSE Leap 15.3
- openSUSE Leap 15.4
- webkit2gtk3
- SUSE CaaS Platform 4.0
- SUSE Enterprise Storage 6
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server 15-SP1-BCL
- SUSE Linux Enterprise Server 15-SP1-LTSS
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server for SAP 15-SP1
- ruby2.5
- SUSE CaaS Platform 4.0
- SUSE Enterprise Storage 6
- SUSE Enterprise Storage 7
- SUSE Linux Enterprise Desktop 15-SP3
- SUSE Linux Enterprise Desktop 15-SP4
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise High Performance Computing 15-SP4
- SUSE Linux Enterprise Micro 5.0
- SUSE Linux Enterprise Module for Basesystem 15-SP3
- SUSE Linux Enterprise Module for Basesystem 15-SP4
- SUSE Linux Enterprise Realtime Extension 15-SP2
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server 15-SP1-BCL
- SUSE Linux Enterprise Server 15-SP1-LTSS
- SUSE Linux Enterprise Server 15-SP2-BCL
- SUSE Linux Enterprise Server 15-SP2-LTSS
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server 15-SP4
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server for SAP 15-SP1
- SUSE Linux Enterprise Server for SAP 15-SP2
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- SUSE Linux Enterprise Server for SAP Applications 15-SP4
- SUSE Manager Proxy 4.1
- SUSE Manager Proxy 4.2
- SUSE Manager Retail Branch Server 4.1
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- openSUSE Leap 15.3
- openSUSE Leap 15.4
- java-11-openjdk
- SUSE CaaS Platform 4.0
- SUSE Enterprise Storage 6
- SUSE Enterprise Storage 7
- SUSE Linux Enterprise Desktop 15-SP3
- SUSE Linux Enterprise Desktop 15-SP4
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise High Performance Computing 15-SP4
- SUSE Linux Enterprise Module for Basesystem 15-SP3
- SUSE Linux Enterprise Module for Basesystem 15-SP4
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4
- SUSE Linux Enterprise Realtime Extension 15-SP2
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server 15-SP1-BCL
- SUSE Linux Enterprise Server 15-SP1-LTSS
- SUSE Linux Enterprise Server 15-SP2-BCL
- SUSE Linux Enterprise Server 15-SP2-LTSS
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server 15-SP4
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server for SAP 15-SP1
- SUSE Linux Enterprise Server for SAP 15-SP2
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- SUSE Linux Enterprise Server for SAP Applications 15-SP4
- SUSE Manager Proxy 4.1
- SUSE Manager Proxy 4.2
- SUSE Manager Retail Branch Server 4.1
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- openSUSE Leap 15.3
- openSUSE Leap 15.4
- Linux Kernel (Live Patch 25 for SLE 12 SP4)
- SUSE Linux Enterprise Live Patching 12-SP4
An attacker could exploit these vulnerabilities by doing the following:
- Denial of Service (DoS) attack
- Information disclosure
- Application crash
- Arbitrary code execution
The CERT team encourages users to review SUSE security advisory and apply the necessary updates:
- https://www.suse.com/support/update/announcement/2022/suse-su-20221505-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221506-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221507-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221508-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221509-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221510-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221511-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221512-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221513-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221486-1/