CVE catalog

CVE-2018-20105

Security update for yast2-rmt

[CVE catalog]

Severity
Medium · CVSS 4.4CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.43% · Oct 25, 2026

This update for yast2-rmt to version 1.3.0 fixes the following issues: Security issue fixed: - CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835). Non-security issue fixed: - Add support for forwarding registration data from RMT to SCC

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseyast2-rmtlinux enterprise module for server applications 15 sp11.3.0-3.5.1fixed
Opensuseyast2-rmtleap 15.01.2.2-lp150.2.19.1fixed
Opensuseyast2-rmttumbleweed1.3.3-1.2fixed
Suseyast2-rmtlinux enterprise module for server applications 151.2.2-3.18.1fixed
Opensuseyast2-rmtleap 15.11.3.0-lp151.2.6.1fixed
Opensuseyast2-rmtleap 15.11.2.2-lp151.2.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseyast2-rmtrpmlinux enterprise module for server applications 15 sp11.3.0-3.5.1Not reportedSUSE-SU-2020:0578-1Not reported
Opensuseyast2-rmtrpmleap 15.01.2.2-lp150.2.19.1Not reportedOPENSUSE-SU-2019:1089-1Not reported
Opensuseyast2-rmtrpmtumbleweed1.3.3-1.2Not reportedOPENSUSE-SU-2024:11534-1Not reported
Suseyast2-rmtrpmlinux enterprise module for server applications 151.2.2-3.18.1Not reportedSUSE-SU-2019:0629-1Not reported
Opensuseyast2-rmtrpmleap 15.11.3.0-lp151.2.6.1Not reportedOPENSUSE-SU-2020:0320-1Not reported
Opensuseyast2-rmtrpmleap 15.11.2.2-lp151.2.3.1Not reportedOPENSUSE-SU-2020:0253-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]