353 matches found
openSUSE: Security Advisory for obs-service-refresh_patches (openSUSE-SU-2018:2801-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for obs-service-refresh_patches (moderate)
This update for obs-service-refreshpatches fixes the following security issue: - An attacker creating a specially formated archive could have tricked the service in deleting directories that shouldn't be deleted boo1108189...
[SECURITY] Fedora 27 Update: obs-build-20180816-291.1.1.fc27
This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...
Fedora Update for obs-build FEDORA-2018-fac5420dd1
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 27 : obs-build / osc (2018-fac5420dd1)
New version of osc and obs-build including fix for CVE-2017-14804 and support for container builds using buildah and podman. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...
Fedora Update for obs-build FEDORA-2018-fe2cbf0c2b
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 28 Update: obs-build-20180816-291.1.1.fc28
This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...
obs-vlfr.fr Improper Access Control vulnerability
Open Bug Bounty ID: OBB-637253 Description| Value ---|--- Affected Website:| obs-vlfr.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
PT-2018-3447
Name of the Vulnerable Software and Affected Versions: Open Build Service versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106 Description: The issue is related to improper input validation in the obs-service-tar scm of Open Build Service, allowing remote attackers to cause access and extra...
PT-2018-3448
Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server 15 obs-service-tar scm versions prior to 0.9.2.1537788075.fefaa74 openSUSE Factory obs-service-tar scm versions prior to 0.9.2.1537788075.fefaa74 Description: The issue is related to a Relative Path Traversal...
PT-2018-3446
Name of the Vulnerable Software and Affected Versions: Open Build Service versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0 Description: A path traversal vulnerability in obs-service-tar scm of Open Build Service allows remote attackers to access files not in the current build. The issue...
obs-service-set_version command execution vulnerability
obs-service-setversion is a code source validator used in the Open Build Service OBS. A security vulnerability exists in the setversion script in obs-service-setversion prior to version 0.5.3-1.1, which stems from the program failing to properly filter user-submitted input. An attacker can exploi...
Code injection
The setversion script as shipped with obs-service-setversion is a source validator for the Open Build Service OBS. In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server...
CVE-2014-0593
The setversion script as shipped with obs-service-setversion is a source validator for the Open Build Service OBS. In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server...
CVE-2014-0594
The CVE-2014-0594 entry corresponds to the Open Build Service (OBS) before version 2.4.6, where CSRF protection was incorrectly disabled in the web interface. This allows an attacker to issue requests without user consent, with impact across confidentiality, integrity, and availability as reflect...
CVE-2014-0593 sed command injection
The setversion script as shipped with obs-service-setversion is a source validator for the Open Build Service OBS. In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server...
CVE-2014-0593
The CVE concerns obs-service-set_version, a script used as a source validator in the Open Build Service (OBS). In versions prior to 0.5.3-1.1 the set_version script did not properly sanitize user input, allowing code execution on the executing server. Public references in the connected documents ...
CVE-2014-0593: Improper Neutralization of Special Elements used in an OS Command
The setversion script as shipped with obs-service-setversion is a source validator for the Open Build Service OBS. In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server...
PT-2018-4122
Name of the Vulnerable Software and Affected Versions obs-service-set version versions prior to 0.5.3-1.1 Description The issue concerns the set version script in obs-service-set version, which is a source validator for the Open Build Service OBS. This script did not properly sanitize user input,...