Hello People,

We have just released Open Build Service 2.10.17 which fixes security vulnerabilities. You should update

your installations as soon as possible.

## Fixed Issues

Frontend:

1. Bug fix session leaking during BsRequest auto accept - See https://github.com/openSUSE/open-build-service/pull/12821

2. Update rails to 5.2.8.1 - CVE-2022-32224 Possible RCE escalation bug with Serialized Columns in Active Record

3. Update tzinfo from 1.2.9 to 1.2.10 - CVE-2022-31163 TZInfo relative path traversal vulnerability allows loading of arbitrary file

## How to Update

Package updates are available from the 2.10 repositories

https://build.opensuse.org/project/show/OBS:Server:2.10

Fixed appliances can be downloaded from

http://openbuildservice.org/download

Kind regards,

Lukas