Opensuse Osc vulnerabilities

• opensuse factory, leap 15.1, osc +4 more +6 more osc: stores downloaded (supposed) RPM in network-controlled filesystem paths CVE-2019-3681 Fix available 7.5 HighJune 3, 2020
• opensuse osc, opensuse +1 more osc before 0.134 might allow remote OBS repository servers or package maintainers to execute... CVE-2012-1095 Fix available 4.3 MediumFebruary 6, 2014