Version 0.162.1-1 of osc is marked for autoremoval from testing on Sun 20 May 2018. It is affected by #895035. The removal of osc will also cause the removal of (transitive) reverse dependencies: open-build-service, osc-plugins-dput. You should try to prevent the removal by fixing these RC bugs.
Depends on packages which need a new maintainer
normal
The packages that osc depends on which need a new maintainer are:
CVE-2017-9274: A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
CVE-2017-9274: A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
CVE-2017-9274: A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
Please fix it.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
4.1.3).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/o/osc.png){kind=link}