CVE-2025-23386 gerbera: Privilege escalation from user gerbera to root because of insecure %post script

A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1...

CVE-2025-23386

CVE-2025-23386 concerns a privilege-escalation in openSUSE Tumbleweed's Gerbera package. The issue is described as an Incorrect Default Permissions vulnerability that allows the service user gerbera to escalate to root, affecting gerbera on openSUSE Tumbleweed prior to 2.5.0-1.1. CVSS indicates a...

CVE-2025-23386 gerbera: Privilege escalation from user gerbera to root because of insecure %post script

A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1...

gerbera-2.5.0-1.1 on GA media (moderate)

gerbera-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14864-1 Rating: moderate Cross-References: CVE-2025-23386 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the gerbera-2.5.0-1.1...