Skip to content
OpenAdvisories

Product · SUSE

obs-service-source_validator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2017-9274

    osc executes spec code during "osc commit"

    A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

    SUSE obs-service-source_validator osc osc Debian Ubuntu