osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Opensuse | Opensuse | 11.4 | 11.4 |
Osc | Opensuse | * | 0.133 |
Opensuse | Opensuse | 12.1 | 12.1 |