| Package | Affected versions | Patched versions |
|---|---|---|
| open buildservice | ≥ 2.4, < 2.4.8≥ 2.5, < 2.5.7≥ 2.6, < 2.6.3 | 2.4.82.5.72.6.3 |
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free