Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:buildservice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductBuildservice (8bee7c6c-c411-5c80-8c04-a1fba2afb3ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56004 vulnerable 2026-07-29 01:00:28.713761 obs-service-tar_scm: command injection via mercurial handler
CRITICAL (10)
A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services
Published: 2026-07-02T14:54:02.119Z
Updated: 2026-07-02T16:11:28.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.