Johannes Segitz of SUSE

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29.

tomcat packaging allows for escalation to root from tomcat user

gerbera: Privilege escalation from user gerbera to root because of insecure %post script

rmt-server-pubcloud allows to escalate from user _rmt to root

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable

saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls

syslog-ng: Local privilege escalation from new to root in %post

kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage

Local privilege escalation from user wwwrun to root in the packaging of mailman

SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite