SUSE CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

A flaw was found in the traefik2 package of OpenSUSE and its derived distributions. This issue occurs due to an insecure chown call in the %post section of the traefik2 package, allowing the traefik user to obtain ownership of arbitrary files on the system when the traefik2 package is reinstalled...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

CVE-2025-46810 concerns the openSUSE Tumbleweed packaging of the traefik2 package. The issue is a UNIX Symbolic Link (Symlink) Following vulnerability that, due to an insecure action in packaging, allows the traefik user to escalate to the root user. The vulnerability affects Tumbleweed installat...

openSUSE 15: jetty-annotations / jetty-ant / jetty-cdi / jetty-client / etc (SUSE-SU-2025:02993-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02993-2 advisory. Upgraded to version 9.4.58.v20250814: - CVE-2025-5115: Fixed MadeYouReset DoS attack via HTTP/2 protocol including DNS over HTTPS bsc1244252 Tenable has...

OPENSUSE-SU-2025:15512-1 bpftop-0.7.1-1.1 on GA media

These are all security issues fixed in the bpftop-0.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

libudisks2-0-2.10.1-4.1 on GA media (moderate)

libudisks2-0-2.10.1-4.1 on GA media Announcement ID: openSUSE-SU-2025:15511-1 Rating: moderate Cross-References: CVE-2025-8067 CVSS scores: CVE-2025-8067 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

jupyter-bqplot-jupyterlab-0.5.46-13.1 on GA media (moderate)

jupyter-bqplot-jupyterlab-0.5.46-13.1 on GA media Announcement ID: openSUSE-SU-2025:15506-1 Rating: moderate Cross-References: CVE-2025-54798 CVSS scores: CVE-2025-54798 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-54798 SUSE : 2...

PT-2025-35551

Name of the Vulnerable Software and Affected Versions: traefik2 versions prior to 2.11.29 Description: A UNIX Symbolic Link Symlink Following vulnerability exists in the packaging of openSUSE Tumbleweed traefik2. This issue allows the traefik user to escalate to root privileges. Recommendations:...

OPENSUSE-SU-2025:15514-1 python311-uv-0.8.14-2.1 on GA media

These are all security issues fixed in the python311-uv-0.8.14-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15513-1 libmupen64plus-devel-2.6.0-2.1 on GA media

These are all security issues fixed in the libmupen64plus-devel-2.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2021-25315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary co...

OPENSUSE-SU-2025:15515-1 regclient-0.9.2-1.1 on GA media

These are all security issues fixed in the regclient-0.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

python311-eventlet-0.40.3-1.1 on GA media (moderate)

python311-eventlet-0.40.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15507-1 Rating: moderate Cross-References: CVE-2025-58068 CVSS scores: CVE-2025-58068 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-58068 SUSE : 6.3...

kured-1.20.0-1.1 on GA media (moderate)

kured-1.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15505-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

openSUSE Tumbleweed 安全漏洞

openSUSE Tumbleweed is a desktop and server operating system from openSUSE Germany. A security vulnerability exists in versions of openSUSE Tumbleweed prior to 2.11.29, which stems from symbolic link following and could result in elevated privileges to root...

Linux Distros Unpatched Vulnerability : CVE-2021-25317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Clou...

traefik2-2.11.29-1.1 on GA media (moderate)

traefik2-2.11.29-1.1 on GA media Announcement ID: openSUSE-SU-2025:15510-1 Rating: moderate Cross-References: CVE-2022-28948 CVSS scores: CVE-2022-28948 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...