CVE catalog

CVE-2019-5021

Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
6.26% · Oct 25, 2026

This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues: - CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524) This update was imported from the SUSE:SLE-15:Update update project.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusesystem-user-rootleap 15.020190513-lp151.3.3.1fixed
Opensusesystem-user-rootleap 15.120190513-lp151.3.3.1fixed
Susesystem-user-rootlinux enterprise module for basesystem 1520190513-3.3.1fixed
Susesuse-sles12sp3-imagelinux enterprise module for containers 122.0.2-22.1fixed
Susesystem-user-rootlinux enterprise module for basesystem 15 sp120190513-3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusesystem-user-rootrpmleap 15.020190513-lp151.3.3.1Not reportedOPENSUSE-SU-2019:1495-1Not reported
Opensusesystem-user-rootrpmleap 15.120190513-lp151.3.3.1Not reportedOPENSUSE-SU-2019:1495-1Not reported
Susesystem-user-rootrpmlinux enterprise module for basesystem 1520190513-3.3.1Not reportedSUSE-SU-2019:1368-1Not reported
Susesuse-sles12sp3-imagerpmlinux enterprise module for containers 122.0.2-22.1Not reportedSUSE-SU-2019:1368-1Not reported
Susesystem-user-rootrpmlinux enterprise module for basesystem 15 sp120190513-3.3.1Not reportedSUSE-SU-2019:1368-2Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]