SUSE Updates

Your review has been sent successfully

SUSE Updates

2422

Classification

Security Alert

● Critical

● High

● Medium

● Low

Warning Date

Severity Level

Warning Number

Target Sector

2 March, 2020

● High

2020-980

All

Description:

SUSE has released security updates to address vulnerabilities in the following products:

libexif
- SUSE Linux Enterprise Server 11-SP4-LTSS
- SUSE Linux Enterprise Point of Sale 11-SP3
- SUSE Linux Enterprise Debuginfo 11-SP4
- SUSE Linux Enterprise Debuginfo 11-SP3
mariadb
- SUSE OpenStack Cloud Crowbar 9
- SUSE OpenStack Cloud 9
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 12-SP4
python
- SUSE Linux Enterprise Module for Python2 15-SP1
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- SUSE Linux Enterprise Module for Basesystem 15-SP1
Linux Kernel
- SUSE Linux Enterprise Module for Public Cloud 15-SP1
rsyslog
- SUSE OpenStack Cloud 7
- SUSE Linux Enterprise Server for SAP 12-SP2
- SUSE Linux Enterprise Server 12-SP2-LTSS
- SUSE Linux Enterprise Server 12-SP2-BCL
php5
- SUSE Linux Enterprise Software Development Kit 12-SP4
- SUSE Linux Enterprise Module for Web Scripting 12
mariadb-100
- SUSE Linux Enterprise Workstation Extension 12-SP5
- SUSE Linux Enterprise Workstation Extension 12-SP4
- SUSE Linux Enterprise Software Development Kit 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP4
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 12-SP4
mariadb
- SUSE OpenStack Cloud Crowbar 8
- SUSE OpenStack Cloud 8
- HPE Helion Openstack 8
java-1_8_0-ibm
- SUSE OpenStack Cloud Crowbar 8
- SUSE OpenStack Cloud 8
- SUSE OpenStack Cloud 7
- SUSE Linux Enterprise Software Development Kit 12-SP5
- SUSE Linux Enterprise Software Development Kit 12-SP4
- SUSE Linux Enterprise Server for SAP 12-SP3
- SUSE Linux Enterprise Server for SAP 12-SP2
- SUSE Linux Enterprise Server for SAP 12-SP1
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 12-SP3-LTSS
- SUSE Linux Enterprise Server 12-SP3-BCL
- SUSE Linux Enterprise Server 12-SP2-LTSS
- SUSE Linux Enterprise Server 12-SP2-BCL
- SUSE Linux Enterprise Server 12-SP1-LTSS
- SUSE Enterprise Storage 5
- HPE Helion Openstack 8
Salt
- SUSE Manager Tools 12-BETA
- SUSE Manager Tools 15-BETA
- SUSE Manager Ubuntu 16.04-CLIENT-TOOLS-BETA
- SUSE Manager Ubuntu 18.04-CLIENT-TOOLS-BETA
permissions
- SUSE OpenStack Cloud Crowbar 8
- SUSE OpenStack Cloud 8
- SUSE OpenStack Cloud 7
- SUSE Linux Enterprise Server for SAP 12-SP3
- SUSE Linux Enterprise Server for SAP 12-SP2
- SUSE Linux Enterprise Server 12-SP3-LTSS
- SUSE Linux Enterprise Server 12-SP3-BCL
- SUSE Linux Enterprise Server 12-SP2-LTSS
- SUSE Linux Enterprise Server 12-SP2-BCL
- SUSE Enterprise Storage 5
- SUSE CaaS Platform 3.0
- HPE Helion Openstack 8
- SUSE Linux Enterprise Server 11-SP4-LTSS
- SUSE Linux Enterprise Debuginfo 11-SP4
- SUSE Linux Enterprise Module for Basesystem 15-SP1

Threats:

Attacker could exploit these vulnerabilities by doing the following:

Unauthorized disclosure of information
Denial of service attack (DoS)
Escalation of privilege
Execute arbitrary code

Best practice and Recommendations:

The CERT team encourages users to review SUSE security advisory and apply the necessary updates:

Last updated at 2 March, 2020

SUSE Updates

Classification

Most Viewed Warnings