A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for     Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise     Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can     change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module     for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development     Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc     versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE     Factory osc versions prior to 0.169.0 . (CVE-2019-3681)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4351-1 advisory.

  - A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for     Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise     Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can     change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module     for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development     Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc     versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE     Factory osc versions prior to 0.169.0 . (CVE-2019-3681)

  - Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the     osc client binary (CVE-2019-3685)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for osc to 0.169.1 fixes the following issues :

Security issue fixed :

  - CVE-2019-3681: Fixed an insufficient validation of     network-controlled filesystem paths (bsc#1122675).

Non-security issues fixed :

  - Improved the speed and usability of osc bash completion.

  - improved some error messages.

  - osc add: support git@ (private github) or git:// URLs     correctly.

  - Split dependson and whatdependson commands.

  - Added support for osc build --shell-cmd.

  - Added pkg-ccache support for osc build.

  - Added --ccache option to osc getbinaries 

This update was imported from the SUSE:SLE-15-SP1:Update update project.

ID	Name	Product	Family	Severity
259017	Linux Distros Unpatched Vulnerability : CVE-2019-3681	Nessus	Misc.	critical
168492	SUSE SLES12 Security Update : osc (SUSE-SU-2022:4351-1)	Nessus	SuSE Local Security Checks	critical
138699	openSUSE Security Update : osc (openSUSE-2020-852)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-3681

critical

Tenable Plugins

critical

critical

critical