CVE-2017-5188: Improper Link Resolution Before File Access

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

CVE-2017-9268: Improper Authorization

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service resource consumption...

PT-2018-8492

Name of the Vulnerable Software and Affected Versions open build service versions prior to 201707022 Description The issue allows authenticated users to cause operations on projects where they do not have permissions, leading to denial of service due to resource consumption. This occurs because t...

PT-2018-8240

Name of the Vulnerable Software and Affected Versions: open build service versions prior to 20170320 Description: The issue allows reading of files outside of the package source directory during build, potentially leading to leakage of private information. This is due to the bs worker code...

[SECURITY] Fedora 27 Update: osc-0.162.1-230.1.1.fc27

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

[SECURITY] Fedora 26 Update: osc-0.162.1-230.1.1.fc26

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

Code injection

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011...

CVE-2011-0469

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011...

CVE-2011-0469

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011...

CVE-2011-0469: Improper Control of Generation of Code

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011...

OSC: Shell command injection

Background OSC is the command line tool and API for the Open Build Service. Description A vulnerability has been discovered that may allow remote attackers to execute arbitrary commands via shell metacharacters in a service file. Impact A remote attacker could possibly execute arbitrary code with...