openSUSE Factory

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

Local privilege escalation from user munge to root

Local privilege escalation from user news to root in the packaging of inn

An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)

arpwatch: Local privilege escalation from runtime user to root

python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root

Local privilege escalation from munin to root in the packaging of munin

Local privilege escalation from user privoxy to root

python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root

virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group

sendmail: mail to root privilege escalation via sm-client.pre script

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.

Out-of-bounds Read in vim/vim

slurm: %post for slurm-testsuite operates as root in user owned directory

cscreen: usage of fixed path /tmp/cscreen.debug

parsec: dangerous 777 permissions for /run/parsec

An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.

An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.

suddoers configuration for cscreen not restrictive enough

canna: unsafe handling of /tmp/.iroha_unix directory

grub2-once uses fixed file name in /var/tmp

cups: ownership of /var/log/cups allows the lp user to create files as root