CVE-2018-20106

CVE-2018-20106 affects YaST yast2-printer (

Code injection

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957 yast2-rmt leaks database passwords in process list

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The CVE-2018-17957 entry affects the YaST2 RMT module in the SUSE openSUSE/YAST2 RMT tool, where versions prior to 1.1.2 expose MySQL database passwords on the process command line, enabling a local attacker to access or corrupt the RMT database. Public documents confirm the issue and that a fix ...

openSUSE Security Update : yast2-rmt (openSUSE-2018-1604)

This update for yast2-rmt to version 1.1.12 fixes the following issues : Security issue fixed : - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

Security update for yast2-rmt (important)

This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602 This update was imported from the SUSE:SLE-15:Update update project...

openSUSE: Security Advisory for yast2-rmt (openSUSE-SU-2018:4272-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:4209-1 Security update for yast2-rmt

This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602...

SUSE SLES12 Security Update : smt, yast2-smt (SUSE-SU-2018:2898-2)

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues : These security issues were fixed in SMT : CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. CVE-2018-12470: SQL injection in...

SUSE-SU-2018:2902-2 Security update for yast2-smt

This update fixes the following issues in yast2-smt: - Explicitly mention 'Organization Credentials' fate321759 - Rearrange the SMT set-up dialog bsc977043 - Added missing translation marks bsc1037811 - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update f...

SUSE-SU-2018:2898-2 Security update for smt, yast2-smt

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues: These security issues were fixed in SMT: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. - CVE-2018-12470: SQL injection in...

openSUSE Security Update : yast2-smt (openSUSE-2018-1081)

This update fixes the following issue in yast2-smt : - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update for SMT. Because of that it is tagged as security to ensure that all users, even those that only install security updates, install it. This update wa...

SuSE Update for yast2-smt openSUSE-SU-2018:2943-1 (yast2-smt)

Check the version of yast2-smt SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.851919";...

Security update for yast2-smt (important)

This update fixes the following issue in yast2-smt: - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update for SMT. Because of that it is tagged as security to ensure that all users, even those that only install security updates, install it. This update was...

SUSE SLES12 Security Update : smt, yast2-smt (SUSE-SU-2018:2898-1)

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues : These security issues were fixed in SMT : CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. CVE-2018-12470: SQL injection in...

SUSE-SU-2018:2902-1 Security update for yast2-smt

This update fixes the following issues in yast2-smt: - Explicitly mention 'Organization Credentials' fate321759 - Rearrange the SMT set-up dialog bsc977043 - Added missing translation marks bsc1037811 - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update f...

SUSE-SU-2018:2904-1 Security update for yast2-smt

This update fixes the following issue in yast2-smt: - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update for SMT. Because of that it is tagged as security to ensure that all users, even those that only install security updates, install it...

SUSE-SU-2018:2181-1 Recommended update for yast2-ftp-server

This update for yast2-ftp-server fixes the following issues: Feature update: fate321043: Added additional searchkeys to desktop file. Security issues fixed: - bsc921303: Drop SSLv2 and SSLv3 as it is dropped for security reason for vsftpd. Bug fixes: - bsc1041829: Do not modify value when Browse...