Matthias Gerstner of SUSE

Polkit authentication dis isabled by default in inputplumber

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

SUSE-specific logrotate configuration allows escalation from mail user/group to root

Denial of Service in fscrypt

Local Denial of Service in fscrypt PAM module

Privilege escalation through command injection in fscrypt

libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls

DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+gi

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects S