Description:

SUSE has released security updates to address several vulnerabilities in the following products:

• binutils
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1
  • SUSE Linux Enterprise Module for Development Tools 15-SP2
  • SUSE Linux Enterprise Module for Development Tools 15-SP1
  • SUSE Linux Enterprise Module for Basesystem 15-SP2
  • SUSE Linux Enterprise Module for Basesystem 15-SP1
• sane-backends
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2
  • SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1
  • SUSE Linux Enterprise Module for Desktop Applications 15-SP2
  • SUSE Linux Enterprise Module for Desktop Applications 15-SP1
• apache2
  • SUSE Linux Enterprise Server for SAP 15
  • SUSE Linux Enterprise Server 15-LTSS
  • SUSE Linux Enterprise Module for Server Applications 15-SP1
  • SUSE Linux Enterprise High Performance Computing 15-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS
• tomcat
  • SUSE Linux Enterprise Module for Web Scripting 15-SP2
  • SUSE Linux Enterprise Module for Web Scripting 15-SP1
• spice
  • SUSE Linux Enterprise Module for Server Applications 15-SP2
• spice-gtk
  • SUSE Linux Enterprise Module for Server Applications 15-SP2
  • SUSE Linux Enterprise Module for Basesystem 15-SP2
• pacemaker
  • SUSE Linux Enterprise High Availability 15-SP1

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Denial of service attack (DoS)
• Buffer overflow
• Unauthorized disclosure of information

Best practice and Recommendations:

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

• https://www.suse.com/support/update/announcement/2020/suse-su-20203060-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203065-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203067-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203068-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203069-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203070-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203071-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203073-1/