osc vulnerabilities (openSUSE)
6 vulnerabilities.
-
oscopenSUSE DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge 6.8 Medium -
oscopenSUSE Crafted projects can overwrite special files in the .osc config directory 5.5 Medium -
oscopenSUSE osc: stores downloaded (supposed) RPM in network-controlled filesystem paths 7.5 High -
oscopenSUSE Missing TLS certificate validation for HTTPS connections in osc 7.4 High -
oscopenSUSE osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters... 7.5 High -
oscopenSUSE osc before 0.134 might allow remote OBS repository servers or package maintainers to execute... 4.3 Medium