[DRE-maint] Bug#903797: open-build-service: CVE-2018-7689

[Salvatore Bonaccorso]

Hi Andrew,

On Fri, Oct 19, 2018 at 05:43:53PM +0800, Andrew Lee wrote:
> Source: open-build-service
> Followup-For: Bug #903797
> 
> 
> This seems only for the 2.9.x versions. Our currently version of
> open-build-service is 2.7.4.

Can you shed some light on that? Why would the missing permision
checks not be relevant in the 2.7.4 version?

Thanks for your investigation!

Regards,
Salvatore