Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2017-9274

osc executes spec code during "osc commit"

Description

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE obs-service-source_validator

  • unspecified to < 0.7affected

References