CVE:CVE-2015-0778
CNNVD:CNNVD-201503-341
Novell osc（OpenSUSE commander）是美国Novell公司的一款基于Python语言的用于openSUSE Build Service（OBS，开放的完整的发行版开发平台）中的命令行客户端，它主要用于显示编译的日志和编译的状态。
Novell osc 0.150及之前版本中存在安全漏洞。远程攻击者可借助a _service文件中的shell元字符利用该漏洞执行任意命令。
solution:Upgrade fedoraproject fedora to a higher version than 20,21,22,and avoid the version 20,21,22; Upgrade suse opensuse_osc to a higher version than 0.150,and avoid the version (,0.150]; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2