CVE-2019-3685: Opensuse Open Build Service

High severity, CVSS 7.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

Affected products

• Opensuse Open Build Service: before 0.165.4 (fixed in 0.165.4)

Published 2019-11-05. Last modified 2026-06-17.