5.5
Medium
CVE-2024-22034 Attackers could put the special files in .osc into the actual package sources (e.g
Description
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 15 SP5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Server 15 SP5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Desktop 15 SP6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Server 15 SP6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| SUSE Linux Enterprise Server 12 SP5 0.183 | earliest → < 0.183.0-15.18.1 | 0.183.0-15.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 0.183 | earliest → < 0.183.0-15.18.1 | 0.183.0-15.18.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 0.183 | earliest → < 0.183.0-15.18.1 | 0.183.0-15.18.1 |
| openSUSE Leap 15.5 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| openSUSE Leap 15.6 1.9 | earliest → < 1.9.0-150400.10.6.1 | 1.9.0-150400.10.6.1 |
| openSUSE Tumbleweed 1.9 | earliest → < 1.9.0-1.1 | 1.9.0-1.1 |