Matthias Gerstner of SUSE

Polkit authentication dis isabled by default in inputplumber

Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

Local users can perform a local root exploit via smb4k mounthelper

Lack of client authorization allows arbitrary users to influence the firewall configuration

A crafted "interface" input parameter can lead to integrity loss of the firewall configuration

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

SUSE-specific logrotate configuration allows escalation from mail user/group to root

Denial of Service in fscrypt

Local Denial of Service in fscrypt PAM module

Privilege escalation through command injection in fscrypt