Security Advisory
CVE-2012-1095
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.