The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: microfocus

Published: 2018-03-01T19:00:00Z

Updated: 2024-09-16T22:26:02.018Z

Reserved: 2017-01-06T00:00:00

Link: CVE-2017-5188

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-03-01T20:29:00.477

Modified: 2024-11-21T03:27:13.803

Link: CVE-2017-5188

cve-icon Redhat

No data.