CVE-2025-46810

A flaw was found in the traefik2 package of OpenSUSE and its derived distributions. This issue occurs due to an insecure chown call in the %post section of the traefik2 package, allowing the traefik user to obtain ownership of arbitrary files on the system when the traefik2 package is reinstalled...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29...

CVE-2025-46810

CVE-2025-46810 concerns the openSUSE Tumbleweed packaging of the traefik2 package. The issue is a UNIX Symbolic Link (Symlink) Following vulnerability that, due to an insecure action in packaging, allows the traefik user to escalate to the root user. The vulnerability affects Tumbleweed installat...

OPENSUSE-SU-2025:15512-1 bpftop-0.7.1-1.1 on GA media

These are all security issues fixed in the bpftop-0.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 15: jetty-annotations / jetty-ant / jetty-cdi / jetty-client / etc (SUSE-SU-2025:02993-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02993-2 advisory. Upgraded to version 9.4.58.v20250814: - CVE-2025-5115: Fixed MadeYouReset DoS attack via HTTP/2 protocol including DNS over HTTPS bsc1244252 Tenable has...

jupyter-bqplot-jupyterlab-0.5.46-13.1 on GA media (moderate)

jupyter-bqplot-jupyterlab-0.5.46-13.1 on GA media Announcement ID: openSUSE-SU-2025:15506-1 Rating: moderate Cross-References: CVE-2025-54798 CVSS scores: CVE-2025-54798 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-54798 SUSE : 2...

libudisks2-0-2.10.1-4.1 on GA media (moderate)

libudisks2-0-2.10.1-4.1 on GA media Announcement ID: openSUSE-SU-2025:15511-1 Rating: moderate Cross-References: CVE-2025-8067 CVSS scores: CVE-2025-8067 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

PT-2025-35551

Name of the Vulnerable Software and Affected Versions: traefik2 versions prior to 2.11.29 Description: A UNIX Symbolic Link Symlink Following vulnerability exists in the packaging of openSUSE Tumbleweed traefik2. This issue allows the traefik user to escalate to root privileges. Recommendations:...

OPENSUSE-SU-2025:15514-1 python311-uv-0.8.14-2.1 on GA media

These are all security issues fixed in the python311-uv-0.8.14-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15515-1 regclient-0.9.2-1.1 on GA media

These are all security issues fixed in the regclient-0.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15513-1 libmupen64plus-devel-2.6.0-2.1 on GA media

These are all security issues fixed in the libmupen64plus-devel-2.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2021-25315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary co...

python311-eventlet-0.40.3-1.1 on GA media (moderate)

python311-eventlet-0.40.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15507-1 Rating: moderate Cross-References: CVE-2025-58068 CVSS scores: CVE-2025-58068 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-58068 SUSE : 6.3...

kured-1.20.0-1.1 on GA media (moderate)

kured-1.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15505-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

openSUSE Tumbleweed 安全漏洞

openSUSE Tumbleweed is a desktop and server operating system from openSUSE Germany. A security vulnerability exists in versions of openSUSE Tumbleweed prior to 2.11.29, which stems from symbolic link following and could result in elevated privileges to root...

Linux Distros Unpatched Vulnerability : CVE-2021-25317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Clou...

rekor-1.4.1-1.1 on GA media (moderate)

rekor-1.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15508-1 Rating: moderate Cross-References: CVE-2025-29923 CVE-2025-58058 CVSS scores: CVE-2025-29923 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2025-58058 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...

dcmtk-3.6.9-4.1 on GA media (moderate)

dcmtk-3.6.9-4.1 on GA media Announcement ID: openSUSE-SU-2025:15504-1 Rating: moderate Cross-References: CVE-2025-9732 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the dcmtk-3.6.9-4.1 packa...