Oval Definition:	oval:org.opensuse.security:def:201810859
Revision Date: 2021-10-24 Version: 1 Title: CVE-2018-10859 Description: git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key. This attack could be used to expose encrypted data that was never stored in git-annex Family: unix Class: vulnerability Status: Reference(s): CVE-2018-10859 openSUSE-SU-2018:1896-1 openSUSE-SU-2018:1897-1 Mitre CVE-2018-10859 SUSE CVE-2018-10859 openSUSE-SU-2018:1896-1 openSUSE-SU-2018:1897-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Package Hub for SUSE Linux Enterprise 12 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information git-annex-6.20180626-lp150.2.5 is installed AND git-annex is signed with openSUSE key OR git-annex-bash-completion-6.20180626-lp150.2.5 is installed AND git-annex-bash-completion is signed with openSUSE key Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information git-annex-6.20180626-7 is installed OR git-annex-bash-completion-6.20180626-7 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information git-annex-6.20180626-8 is installed AND git-annex is signed with openSUSE key OR git-annex-bash-completion-6.20180626-8 is installed AND git-annex-bash-completion is signed with openSUSE key Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information git-annex-6.20180626-7.1 is installed OR git-annex-bash-completion-6.20180626-7.1 is installed
BACK