CVE-2019-3693

CVE-2019-3693 is a local privilege-escalation flaw in the mailman packaging for SUSE SLES 11/12 and openSUSE Leap 15.1. A symlink-following vulnerability during package installation could allow a local attacker (wwwrun group) to escalate to root and potentially alter files to the mailman group. A...