Package · Debian

osc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2019-3681

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE F…

SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Software Development Kit 12-SP5 Linux Debian Ubuntu

Jun 29, 2020
High 7.8

CVE-2017-9274

osc executes spec code during "osc commit"

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

SUSE obs-service-source_validator osc osc Debian Ubuntu

Mar 1, 2018