himmelblau vulnerabilities (openSUSE)
10 vulnerabilities.
himmelblauopenSUSEHimmelblau: Authentication Bypass via Cross-User Local Session Impersonation in Device Authorization Grant (DAG) Flow8.4 HighhimmelblauopenSUSErust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers5.1 MediumhimmelblauopenSUSEhimmelblau: NSS fake-primary group lookup reintroduces name collision risk6.3 MediumhimmelblauopenSUSEhimmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache8.8 HighhimmelblauopenSUSEtime affected by a stack exhaustion denial of service attack6.8 MediumhimmelblauopenSUSEHimmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)4.4 MediumhimmelblauopenSUSETracing logging user input may result in poisoning logs with ANSI escape sequences2.3 LowhimmelblauopenSUSEHimmelblau's Kerberos credential cache collection is world readable7.1 HighhimmelblauopenSUSEHimmelblau offline auth permits authentication with invalid Hello PIN5.2 MediumhimmelblauopenSUSERustls: rustls network-reachable panic in `acceptor::accept`5.3 Medium