7.8
High
CVE-2014-0593 The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS)
Description
The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| obs-service-set_version 0.5 | earliest → < 0.5.3-1.1 | 0.5.3-1.1 |
References
- [opensuse-buildservice] 20140303 EXE package format lists.opensuse.org
- bugzilla.suse.com bugzilla.suse.com
- www.suse.com www.suse.com
- github.com github.com
Timeline
- Published
- Last modified