{"schemaVersion":3,"id":"SUSE-SU-2022:4351-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for osc\n\nThis update for osc fixes the following issues:\n\n  osc was updated to version 0.182.0 (bsc#1154972, bsc#1144211, bsc#1142662, bsc#1140697, bsc#1138165):\n\n  - Added MFA support (jsc#OBS-203).\n  - CVE-2019-3681: Fixed vulnerability where osc stored downloaded RPMs in network controlled paths (bsc#1122675).\n  - CVE-2019-3685: Fixed broken TLS certificate handling (bsc#1142518).\n\n  Bugfixes:\n  - Removed use of chardet to guess encoding. Utf-8 or latin-1 is now assumed, which will speed up decoding (bsc#1173926).\n  - Added helper method _html_escape to enable python3.8 and python2.* compatibility (bsc#1166537).\n  - Added MR creation to honor orev (bsc#1160446).\n  - Fixed local build outside of the working copy of a package (bsc#1136584).\n  - Don't enforce password reuse (bsc#1156501).\n  - osc vc --file=foo bar.changes now writes the content from foo into bar.changes instead of creating a new file (bsc#1155953).\n  - Fixed decoding on osc lbl (bsc#1137477).\n  - Simplified and fixed osc meta -e (bsc#1138977).\n  - osc lbl now works with non utf8 encoding (bsc#1129889).\n  - Added full python3 compatibility (bsc#1125243, bsc#1131512, bsc#1129757).\n  - Fixed slowdown of rbl with readline(bufsize) function (bsc#1127932).\n  - Fixed osc build -p dir TypeError (bsc#1126055).\n  - Fixed osc buildinfo -p TypeError (bsc#1126058).\n  - Added new options --unexpand and --meta to diff command (bsc#1089025).\n  - Fixed Requires to python-base which does not contain ssl.py (bsc#1097996).","dates":{"published":"2022-12-07T16:38:34.000Z","modified":"2026-02-04T04:25:29.581Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"osc&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"osc","label":"osc&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/osc&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 0.182.0-15.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.182.0-15.12.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224351-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20224351-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1089025","label":"bugzilla.suse.com/1089025","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1097996","label":"bugzilla.suse.com/1097996","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1122675","label":"bugzilla.suse.com/1122675","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1125243","label":"bugzilla.suse.com/1125243","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1126055","label":"bugzilla.suse.com/1126055","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1126058","label":"bugzilla.suse.com/1126058","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1127932","label":"bugzilla.suse.com/1127932","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129757","label":"bugzilla.suse.com/1129757","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129889","label":"bugzilla.suse.com/1129889","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1131512","label":"bugzilla.suse.com/1131512","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1136584","label":"bugzilla.suse.com/1136584","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1137477","label":"bugzilla.suse.com/1137477","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1138165","label":"bugzilla.suse.com/1138165","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1138977","label":"bugzilla.suse.com/1138977","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1140697","label":"bugzilla.suse.com/1140697","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142518","label":"bugzilla.suse.com/1142518","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142662","label":"bugzilla.suse.com/1142662","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144211","label":"bugzilla.suse.com/1144211","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1154972","label":"bugzilla.suse.com/1154972","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1155953","label":"bugzilla.suse.com/1155953","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1156501","label":"bugzilla.suse.com/1156501","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1160446","label":"bugzilla.suse.com/1160446","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1166537","label":"bugzilla.suse.com/1166537","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1173926","label":"bugzilla.suse.com/1173926","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3681","label":"www.suse.com/security/cve/CVE-2019-3681","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3685","label":"www.suse.com/security/cve/CVE-2019-3685","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-3681","CVE-2019-3685"],"downstream":[],"duplicates":[],"related":["CVE-2019-3681","CVE-2019-3685"]},"timeline":[{"kind":"published","date":"2022-12-07T16:38:34.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:25:29.581Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:56:42.703Z","stale":false,"partial":false}}