SUSE-SU-2025:3786-1 Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: - CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7. A patched version of the package is available...

agama-17+60.68fdb92ec-26.1 on GA media (moderate)

agama-17+60.68fdb92ec-26.1 on GA media Announcement ID: openSUSE-SU-2025:15412-1 Rating: moderate Cross-References: CVE-2025-5791 CVSS scores: CVE-2025-5791 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-5791 SUSE : 8.4...

Azure Linux 3.0 Security Update: kata-containers / kata-containers-cc (CVE-2025-5791)

The version of kata-containers / kata-containers-cc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5791 advisory. - A flaw was found in the user's crate for Rust. This vulnerability allows...

CBL Mariner 2.0 Security Update: kata-containers / kata-containers-cc (CVE-2025-5791)

The version of kata-containers / kata-containers-cc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5791 advisory. - A flaw was found in the user's crate for Rust. This vulnerability allows...

afterburn-5.8.2-3.1 on GA media (moderate)

afterburn-5.8.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15335-1 Rating: moderate Cross-References: CVE-2025-5791 CVSS scores: CVE-2025-5791 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-5791 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

flake-pilot-3.1.19-1.1 on GA media (moderate)

flake-pilot-3.1.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15217-1 Rating: moderate Cross-References: CVE-2025-3416 CVE-2025-5791 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3...

mirrorsorcerer-0.1.3~1-1.1 on GA media (moderate)

mirrorsorcerer-0.1.31-1.1 on GA media Announcement ID: openSUSE-SU-2025:15246-1 Rating: moderate Cross-References: CVE-2025-5791 CVSS scores: CVE-2025-5791 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-5791 SUSE : 8.4...

SUSE SLED15: himmelblau / himmelblau-sshd-config / libnss_himmelblau2 / etc (SUSE-SU-2025:02166-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02166-1 advisory. - CVE-2025-5791: Fixed using deprecated users crate bsc1244202 - CVE-2025-3416: Fixed use-After-Free in...

SUSE-SU-2025:02166-1 Security update for himmelblau

This update for himmelblau fixes the following issues: - CVE-2025-5791: Fixed using deprecated users crate bsc1244202 - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate bsc1242648 Update to version 0.7.17+git.0.1ebdab0 Update sccache-action version to use n...

AZL-63848 CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

CVE-2025-5791 Users: `root` appended to group listings

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

CVE-2025-5791

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

acct (>=0.2.0 <=0.5.0), afterburn (>=4.1.0 <=4.3.2) +66 more potentially affected by CVE-2025-5791 via users (>=0.8.1 <=0.9.1)

users CARGO version =0.8.1, =0.2.0, =4.1.0, =1.0.0, =0.1.0, =0.1.0, =0.4.2, =0.4.0, =0.7.4, =0.0.1, =0.1.4, =0.4.4, =0.1.0, =0.1.1 and more Source cves: CVE-2025-5791 Source advisory: OSV:RUSTSEC-2025-0040...