A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.
{
"binaries": [
{
"binary_name": "obs-api",
"binary_version": "2.7.4-2"
},
{
"binary_name": "obs-productconverter",
"binary_version": "2.7.4-2"
},
{
"binary_name": "obs-server",
"binary_version": "2.7.4-2"
},
{
"binary_name": "obs-utils",
"binary_version": "2.7.4-2"
},
{
"binary_name": "obs-worker",
"binary_version": "2.7.4-2"
}
],
"availability": "No subscription required"
}