Unrated
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory...
CVE-2017-5188
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2017-5188 open-build-service Fixed in: 2.7.4-3
Original description The description as published by the source.
References
- patch github.com
- report bugzilla.suse.com
- web suse.com