CVE-2025-53881
Fixed in a distro release EPSS <1%CVSS 6.9
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
Products: opensuse tumbleweed
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Leap 16.0 | exim | 4.98.2-bp160.2.1 |
| openSUSE Tumbleweed | exim | 4.98.2-4.1 |