SUSE Alert
2336Warning Date
Severity Level
Warning Number
Target Sector
22 June, 2022
● Medium
2022-4985
All
SUSE has released security updates to address several vulnerabilities in the following products:
- SUSE Manager 4.1.15
- SUSE Manager Proxy 4.1
- SUSE Manager Retail Branch Server 4.1
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Manager Proxy 4.2
- SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Manager Proxy 4.2
- SUSE Manager Server 4.2
- SUSE Manager Server 4.1
- SUSE Linux Enterprise Module for SUSE Manager Server 4.1
- SUSE Manager Server 4.1
- release-notes-susemanager, release-notes-susemanager-proxy
- SUSE Manager Proxy 4.2
- SUSE Manager Retail Branch Server 4.2
- SUSE Manager Server 4.2
- python36
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server for SAP Applications 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP5
An attacker could exploit these vulnerabilities by doing the following:
- Denial of service (DoS)
- Execute arbitrary code
The CERT team encourages users to review SUSE security advisory and apply the necessary updates:
- https://www.suse.com/support/update/announcement/2022/suse-su-20222143-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222144-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222144-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222145-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222146-1/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222147-1/