EUVD-2009-1643

Malware in sbrugna...

EUVD-2018-9696

Malware in sbrugna...

EUVD-2011-3144

Malware in sbrugna...

OPENSUSE-SU-2024:11531-1 yast2-core-4.4.0-1.4 on GA media

These are all security issues fixed in the yast2-core-4.4.0-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11534-1 yast2-rmt-1.3.3-1.2 on GA media

These are all security issues fixed in the yast2-rmt-1.3.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11533-1 yast2-multipath-4.4.1-1.2 on GA media

These are all security issues fixed in the yast2-multipath-4.4.1-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10410-1 yast2-3.2.7-1.1 on GA media

These are all security issues fixed in the yast2-3.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11535-1 yast2-samba-provision-1.0.5-1.2 on GA media

These are all security issues fixed in the yast2-samba-provision-1.0.5-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11532-1 yast2-buildtools-4.4.1-1.2 on GA media

These are all security issues fixed in the yast2-buildtools-4.4.1-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11536-1 yast2-security-4.4.1-1.2 on GA media

These are all security issues fixed in the yast2-security-4.4.1-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10138-1 yast2-core-3.2.0-1.1 on GA media

These are all security issues fixed in the yast2-core-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10149-1 yast2-users-3.2.6-1.1 on GA media

These are all security issues fixed in the yast2-users-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2007-6167

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory...

SUSE CVE-2009-1648

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...

SUSE CVE-2012-0427

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted 1 file name or 2 directory name...

SUSE CVE-2016-1601

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...

SUSE CVE-2018-17955

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection...

SUSE CVE-2018-17956

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list...

SUSE CVE-2018-20105

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2...

SUSE CVE-2018-20106

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast...