7.8
Élevée
CVE-2014-0593 The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS)
Description
The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| obs-service-set_version 0.5 | premières → < 0.5.3-1.1 | 0.5.3-1.1 |
Références
- [opensuse-buildservice] 20140303 EXE package format lists.opensuse.org
- bugzilla.suse.com bugzilla.suse.com
- www.suse.com www.suse.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification