CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

DEBIAN-CVE-2017-5188

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

DEBIAN-CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

CVE-2017-5188 OBS worker VM escape via relative symbolic links

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-9268 open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

CVE-2017-5188

The CVE-2017-5188 vulnerability affects openSUSE/open-build-service: the bs_worker code, prior to version 20170320, followed relative symlinks to read files outside the package source directory during a build, enabling leakage of private information. Impact in the sources states potential disclos...

CVE-2017-9268

Open Build Service vulnerability CVE-2017-9268: In OSS before 201707022, the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to perform operations on projects they should not access, leading to denial of service (resource consumption). Affec...

CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

CVE-2017-5188

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

CVE-2017-5188

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-5188: Improper Link Resolution Before File Access

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-9268: Improper Authorization

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

PT-2018-8240

Name of the Vulnerable Software and Affected Versions: open build service versions prior to 20170320 Description: The issue allows reading of files outside of the package source directory during build, potentially leading to leakage of private information. This is due to the bs worker code...

PT-2018-8492

Name of the Vulnerable Software and Affected Versions open build service versions prior to 201707022 Description The issue allows authenticated users to cause operations on projects where they do not have permissions, leading to denial of service due to resource consumption. This occurs because t...

[SECURITY] Fedora 27 Update: osc-source_validator-0.10-1.fc27

This is a source service for openSUSE Build Service. This service runs all checks as required by openSUSE:Factory project. This can be used to guarantee that all checks succeed also on the service side. This plugin can be used via project wide defined services...

[SECURITY] Fedora 27 Update: osc-0.162.1-230.1.1.fc27

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

[SECURITY] Fedora 26 Update: osc-source_validator-0.10-1.fc26

This is a source service for openSUSE Build Service. This service runs all checks as required by openSUSE:Factory project. This can be used to guarantee that all checks succeed also on the service side. This plugin can be used via project wide defined services...

[SECURITY] Fedora 26 Update: osc-0.162.1-230.1.1.fc26

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...