daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

gerbera: Privilege escalation from user gerbera to root because of insecure %post script

tomcat packaging allows for escalation to root from tomcat user

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable

LPE from suricata user to root due to chown in %post in suricata packaging

grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

obs-service-download_url is vulnerable to argument injection

XSS vulnerability found in OpenSuse MirrorCache

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

Crafted projects can overwrite special files in the .osc config directory

csync2 uses insecure temporary directories when compiled with C99 or later

The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess