open-build-service

2 results · Clear filters · Feed

• High 7.1
  CVE-2018-7688

  Open Build Service accepts arbitrary reviews

  A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

  openSUSE open build service open-build-service open-build-service Debian Ubuntu
  Jun 7, 2018
• High 7.1
  CVE-2018-7689

  Open Build Service arbitrary package modification

  Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

  openSUSE open build service open-build-service open-build-service Debian Ubuntu
  Jun 7, 2018