CVE catalog
CVE-2019-18905
Security update for autoyast2
- Severity
- Medium · CVSS 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.73% · Oct 25, 2026
This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands (bsc#1140711). Non-security issue fixed: - Fix desktop files updating some icons and groups (bsc#1168123). - Restored some missing icons (bsc#1168123, bsc#1109310 and bsc#1168281). - Service for init scripts: Try to start 'network-online.target' before starting the autoyast init scripts in order to get a working network (bsc#1164105). - Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | autoyast2 | linux enterprise module for basesystem 15 sp1 | 4.1.15-3.13.1 | fixed |
| Opensuse | autoyast2 | leap 15.1 | 4.1.15-lp151.2.12.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | autoyast2 | rpm | linux enterprise module for basesystem 15 sp1 | 4.1.15-3.13.1 | Not reported | SUSE-SU-2020:1296-1 | Not reported |
| Opensuse | autoyast2 | rpm | leap 15.1 | 4.1.15-lp151.2.12.1 | Not reported | OPENSUSE-SU-2020:0676-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: