osc (SUSE:Linux Enterprise Module for Development Tools 15 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Development Tools 15 SP1 package osc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2019-3681 — CVSS 7.5 (high): A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux…
• CVE-2019-3685 — CVSS 7.4 (high): Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary