Suse Opensuse Factory Vulnerabilities

Suse Opensuse Factory vulnerabilities.

28 November 2024

Attackers can leak information or cause denial of service through specially crafted git repositories in obs-scm-bridge
CVE-2024-22038
SuseOpensuse Factory7.3HIGH

15 March 2023

obs-service-go_modules: arbitrary directory delete
CVE-2022-45155
SuseOpensuse Factory5.5MEDIUM

26 October 2022

sendmail: mail to root privilege escalation via sm-client.pre script
CVE-2022-31256
SuseOpensuse Factory7.7HIGH

7 September 2022

slurm: %post for slurm-testsuite operates as root in user owned directory
CVE-2022-31251
SuseOpensuse Factory6.5MEDIUM

16 March 2022

grub2-once uses fixed file name in /var/tmp
CVE-2021-46705
SuseSuse Linux Enterprise ...5.1MEDIUM

5 May 2021

cups: ownership of /var/log/cups allows the lp user to create files as root
CVE-2021-25317
SuseSuse Linux Enterprise ...3.3LOW

29 June 2020

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths
CVE-2019-3681
SuseSuse Linux Enterprise ...7.5HIGH

No more vulnerabilities to load.