CVE:CVE-2018-12476
CNNVD:CNNVD-201903-092
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15中存在安全漏洞。攻击者可利用该漏洞向包目录之外的位置写入文件。
solution:Upgrade suse obs-service-tar_scm to a higher version than 0.9.2.1537788075.fefaa74,and avoid the version (,0.9.2.1537788075.fefaa74)