The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
| Software | From | Fixed in |
|---|---|---|
| opensuse / open_build_service | 0.5.3 | 1.1 |