CVE-2022-21944
Fixed in a distro release EPSS <1%CVSS 7.8
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.
Products: openSUSE Backports SLE-15-SP3, openSUSE Factory
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP3 | watchman | 4.9.0-bp153.2.3.1 |
| openSUSE Leap 15.3 | watchman | 4.9.0-bp153.2.3.1 |