Описание
Security update for exim
This update for exim fixes the following issues:
- CVE-2025-53881: Fixed a potential security issue with logfile rotation (bsc#1246457)
Список пакетов
openSUSE Leap 16.0
exim-4.98.2-bp160.1.2
eximon-4.98.2-bp160.1.2
eximstats-html-4.98.2-bp160.1.2
Ссылки
- SUSE Security Ratings
- SUSE Bug 1246457
- SUSE CVE CVE-2025-53881 page
Описание
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
Затронутые продукты
openSUSE Leap 16.0:exim-4.98.2-bp160.1.2
openSUSE Leap 16.0:eximon-4.98.2-bp160.1.2
openSUSE Leap 16.0:eximstats-html-4.98.2-bp160.1.2
Ссылки
- CVE-2025-53881
- SUSE Bug 1246457