Most recent entries from all

EUVD-2026-198702

fkie_cve-2024-22034

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim

GHSA-gm3v-m2w5-wm38

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim

gsd-2024-22034

OESA-2024-2133 — osc security update

Affected: openEuler:22.03-LTS-SP4: osc, openEuler:22.03-LTS-SP3: osc, openEuler:20.03-LTS-SP4: osc, openEuler:22.03-LTS-SP1: osc, openEuler:24.03-LTS: osc

The osc is an opensuse-commander with svn like handling. It's a command line interface to work with an Open Build Service.

Security Fix(es):

(CVE-2024-22034)

openSUSE-SU-2024:14277-1 — osc-1.9.0-1.1 on GA media

osc-1.9.0-1.1 on GA media

SUSE-SU-2024:2961-1 — Security update for osc

Security update for osc

UBUNTU-CVE-2024-22034

Affected: Ubuntu:16.04:LTS: osc, Ubuntu:18.04:LTS: osc, Ubuntu:20.04:LTS: osc, Ubuntu:22.04:LTS: osc, Ubuntu:24.04:LTS: osc

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim