Matthias Gerstner, SUSE

File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

Misaligned Memory Accesses in `is_openvpn_protocol()`

Screen 5.0.0 and older versions allow file existence tests when installed setuid-root

Screen creates by default world-writable PTYs

Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root

Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root