osc vulnerabilities (SUSE)
8 vulnerabilities.
-
oscSUSE Crafted projects can overwrite special files in the .osc config directory 5.5 Medium -
oscSUSE osc: stores downloaded (supposed) RPM in network-controlled filesystem paths 7.5 High -
oscSUSE Missing TLS certificate validation for HTTPS connections in osc 7.4 High -
oscSUSE osc executes spec code during "osc commit" 7.8 High -
oscSUSE package builds could use directory traversal to write outside of target area 9.9 Critical -
oscSUSE Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in... 9.8 Critical -
oscSUSE osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters... 7.5 High -
oscSUSE cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote... 5.0 Medium