SUSE-SU-2024:2963-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20242963-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2963-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:2963-1

Upstream

CVE-2024-22034

Related

CVE-2024-22034

Published

2024-08-19T12:06:57Z

Modified

2026-02-04T03:55:00Z

Summary

Security update for osc

Details

This update for osc fixes the following issues:

0.183.0

Fix possibility to overwrite special files in .osc (CVE-2024-22034 bsc#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changing version of '.osc' store to 2.0.
Fix errorneous double quotes in core.py

References

Affected packages

SUSE:Linux Enterprise Software Development Kit 12 SP5 / osc

Package

Name: osc
Purl: pkg:rpm/suse/osc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.183.0-15.18.1

Ecosystem specific

{
    "binaries":  [
        {
            "osc":  "0.183.0-15.18.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2963-1.json"