| Bug | stretch | sid | Description |
|---|
| CVE-2018-7689 | vulnerable (no DSA) | fixed | Lack of permission checks in the InitializeDevelPackage function in ... |
| CVE-2018-7688 | vulnerable (no DSA) | fixed | A missing permission check in the review handling of openSUSE Open ... |
| CVE-2018-12479 | vulnerable | fixed | A Improper Input Validation vulnerability in Open Build Service allows ... |
| CVE-2018-12467 | vulnerable | fixed | Authorized users of the openbuildservice before 2.9.4 could delete ... |
| CVE-2018-12466 | vulnerable | vulnerable | openSUSE openbuildservice before 9.2.4 allowed authenticated users to ... |
| CVE-2017-9268 | vulnerable (no DSA) | vulnerable | In the open build service before 201707022 the wipetrigger and rebuild ... |
| CVE-2017-5188 | vulnerable (no DSA) | fixed | The bs_worker code in open build service before 20170320 followed ... |