SUSE has released a security update to address several vulnerabilities in the following products:

• SUSE Linux Enterprise Server 12-SP2-BCL
• SUSE Linux Enterprise Server 12-SP3-BCL
• SUSE Linux Enterprise Server 12-SP4-LTSS
• SUSE Linux Enterprise Server 12-SP5
• SUSE Linux Enterprise Server for SAP 12-SP4
• SUSE Linux Enterprise Server for SAP Applications 12-SP5
• SUSE Linux Enterprise Software Development Kit 12-SP5
• SUSE OpenStack Cloud 9
• SUSE OpenStack Cloud Crowbar 9
• SUSE Linux Enterprise Server 12-SP2-BCL
• SUSE Linux Enterprise Server 12-SP3-BCL
• SUSE Linux Enterprise Server 12-SP4-LTSS
• SUSE Linux Enterprise Server 12-SP5
• SUSE Linux Enterprise Server for SAP 12-SP4
• SUSE Linux Enterprise Server for SAP Applications 12-SP5
• SUSE Linux Enterprise Software Development Kit 12-SP5
• SUSE OpenStack Cloud 9
• SUSE OpenStack Cloud Crowbar 9
• SUSE CaaS Platform 4.0
• SUSE Enterprise Storage 6
• SUSE Linux Enterprise High Performance Computing 15-ESPOS
• SUSE Linux Enterprise High Performance Computing 15-LTSS
• SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
• SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
• SUSE Linux Enterprise Server 15-LTSS
• SUSE Linux Enterprise Server 15-SP1-BCL
• SUSE Linux Enterprise Server 15-SP1-LTSS
• SUSE Linux Enterprise Server for SAP 15
• SUSE Linux Enterprise Server for SAP 15-SP1

Attacker could exploit these vulnerabilities by doing the following:

• Execute arbitrary code
• Memory corruption

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

• https://www.suse.com/support/update/announcement/2022/suse-su-20223007-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20223001-1/
• https://www.suse.com/support/update/announcement/2022/suse-su-20222997-1/