CVE-2017-5188

The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.

References

Affected packages

Git / github.com/opensuse/open-build-service

Affected ranges

Type

GIT

Repo

https://github.com/opensuse/open-build-service

Events

Introduced

Last affected

505b29c18871ce7466bf9398459b64dccf35563b

Fixed

ba27c91351878bc297ec4baba0bd488a2f3b568d

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.3"
        }
    ]
}

Affected versions

1.*

1.9.90

1.9.91

1.9.92

2.*

2.3.60

2.3.90

2.3.91

2.4.50

2.4.51

2.5.50

2.7.0

2.7.1

2.7.2

2.7.3

Other

stable

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5188.json"