Opensuse Obs-service-source Validator vulnerabilities

• opensuse obs-service-source validator osc executes spec code during "osc commit" CVE-2017-9274 Fix available 7.8 HighDecember 8, 2017