CVE-2014-0593: Opensuse Open Build Service

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.

Affected products

• Opensuse Open Build Service: from 0.5.3, before 1.1 (fixed in 1.1)

Published 2018-06-08. Last modified 2026-06-17.