Description:

SUSE has released security updates to address several vulnerabilities in the following products:

• SUSE Linux Enterprise Server 12-SP3-LTSS
• SUSE Linux Enterprise Module for Live Patching 15
• SUSE Linux Enterprise Live Patching 12-SP4
• SUSE Linux Enterprise Server for SAP 12-SP3
• SUSE Linux Enterprise Module for Live Patching 15-SP2
• SUSE Linux Enterprise Module for Live Patching 15-SP1
• SUSE Linux Enterprise Live Patching 12-SP5
• SUSE Linux Enterprise Software Development Kit 12-SP5
• SUSE Linux Enterprise Server 12-SP5
• SUSE Linux Enterprise Server 11-SECURITY
• SUSE OpenStack Cloud Crowbar 9
• SUSE OpenStack Cloud Crowbar 8
• SUSE OpenStack Cloud 9
• SUSE OpenStack Cloud 8
• SUSE Linux Enterprise Server for SAP 12-SP4
• SUSE Linux Enterprise Server 12-SP4-LTSS
• SUSE Linux Enterprise Server 12-SP3-BCL
• SUSE Linux Enterprise Server 12-SP2-LTSS-SAP
• SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON
• SUSE Linux Enterprise Server 12-SP2-BCL
• HPE Helion Openstack 8
• SUSE Linux Enterprise Module for Desktop Applications 15-SP3
• SUSE Linux Enterprise Module for Desktop Applications 15-SP2
• SUSE Linux Enterprise Module for Basesystem 15-SP3
• SUSE Linux Enterprise Module for Basesystem 15-SP2
• SUSE Linux Enterprise Server 11-SP4-LTSS
• SUSE Linux Enterprise Debuginfo 11-SP4
• SUSE MicroOS 5.0
• SUSE Manager Server 4.0
• SUSE Manager Retail Branch Server 4.0

Threats:

Attacker could exploit these vulnerabilities by disclosing sensitive information :

• Execute arbitrary code
• Sensitive information disclosure

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

• https://www.suse.com/support/update/announcement/2021/suse-su-20211341-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211347-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211373-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211344-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211365-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211395-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211396-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-202114707-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211399-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211401-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211408-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211409-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-202114708-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211412-1/