Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:open_buildservice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductOpen Buildservice (755146b6-9264-5e41-9164-5afb5dcb0a7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/opensuse/open-build-service purl2cpe 2026-06-01 10:15:36.440402

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0796 vulnerable 2026-06-08 05:06:22.923368 open build service source server symlink exploitation via source patch
MEDIUM (6.3)
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
Published: 2018-03-02T20:00:00.000Z
Updated: 2024-09-16T23:56:32.388Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.