Vendor
openSUSE
83 known vulnerabilities.
Products
Factory 24
open build service 14
openSUSE Leap 15.1 13
Tumbleweed 9
Leap 15.1 8
openSUSE Leap 15.2 6
openSUSE Leap 15.4 4
Leap 15.2 3
openSUSE Tumbleweed 3
openbuildservice 3
openSUSE Leap 15.3 2
libeconf 2
openSUSE Factory 2
openSUSE Backports SLE-15-SP3 2
sdbootutil 1
openSUSE Backports SLE-15-SP1 1
Leap 1
obs-service-set_version 1
libsolv 1
openSUSE Leap Micro 5.2 1
Build service 1
buildservice 1
opensuse-welcome 1
travel-support-program 1
openSUSE Backports SLE-15-SP2 1
paste 1
openSUSE Backports SLE-15-SP4 1
83 results · Feed
-
High 7.1
Open Build Service arbitrary package modification
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.
-
High 8.1
openbuildservice webui code injection
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
-
Medium 5.0
OBS worker VM escape via relative symbolic links
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.