CVE-2025-53882

CVE-2025-53882 affects openSUSE Tumbleweed due to a vulnerability in the logrotate configuration used by mailman3. The issue arises from reliance on untrusted inputs in a security decision, enabling the mailman user to send SIGHUP to arbitrary processes. Affected version range is openSUSE Tumblew...

openSUSE Tumbleweed 安全漏洞

openSUSE Tumbleweed is a desktop and server operating system from openSUSE Germany. A security vulnerability exists in openSUSE Tumbleweed versions prior to 3.3.10-2.1, which stems from a logrotate configuration dependency on untrustworthy input that could lead to elevation of privilege...

OPENSUSE-SU-2025:15372-1 grafana-11.6.3+security01-1.1 on GA media

These are all security issues fixed in the grafana-11.6.3+security01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15371-1 firefox-esr-140.1.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15374-1 viewvc-1.3.0~dev20250722-1.1 on GA media

These are all security issues fixed in the viewvc-1.3.0dev20250722-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15373-1 jupyter-jupyterlab-templates-0.5.2-3.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.2-3.1 package on the GA media of openSUSE Tumbleweed...

cyradm-3.8.6-1.1 on GA media (moderate)

cyradm-3.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15369-1 Rating: moderate Cross-References: CVE-2025-49812 CVSS scores: CVE-2025-49812 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2025-49812 SUSE : 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N...

SUSE SLED15: libgcrypt-devel / libgcrypt-devel-32bit / libgcrypt20 / etc (SUSE-SU-2025:02447-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02447-1 advisory. - CVE-2024-2236: Fixed timing based side-channel in RSA implementation. bsc1221107 Tenable has extracted...

Security update for iputils

This update for iputils fixes the following issues: CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp bsc1243772. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

openSUSE Security Advisory (SUSE-SU-2025:02381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02383-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02367-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15370-1 hauler-1.2.5-1.1 on GA media

These are all security issues fixed in the hauler-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

busybox-1.37.0-5.1 on GA media (moderate)

busybox-1.37.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:15361-1 Rating: moderate Cross-References: CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVSS scores: CVE-2023-42363 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-42364 SUSE : 5.5...

libexslt0-1.1.43-2.1 on GA media (moderate)

libexslt0-1.1.43-2.1 on GA media Announcement ID: openSUSE-SU-2025:15364-1 Rating: moderate Cross-References: CVE-2025-7424 CVSS scores: CVE-2025-7424 SUSE : 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

lemon-3.50.3-1.1 on GA media (moderate)

lemon-3.50.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15368-1 Rating: moderate Cross-References: CVE-2025-6965 CVSS scores: CVE-2025-6965 SUSE : 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

apache2-2.4.64-1.1 on GA media (moderate)

apache2-2.4.64-1.1 on GA media Announcement ID: openSUSE-SU-2025:15360-1 Rating: moderate Cross-References: CVE-2024-42516 CVE-2024-43204 CVE-2024-43394 CVE-2024-47252 CVE-2025-23048 CVE-2025-49630 CVE-2025-49812 CVE-2025-53020 CVSS scores: CVE-2024-42516 SUSE : 4...

java-21-openjdk-21.0.8.0-1.1 on GA media (moderate)

java-21-openjdk-21.0.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15362-1 Rating: moderate Cross-References: CVE-2025-30749 CVE-2025-30754 CVE-2025-50059 CVE-2025-50106 CVSS scores: CVE-2025-30749 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-30749 SUSE : 8.3...

openSUSE Security Advisory (SUSE-SU-2025:02362-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...