Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:leap_15.2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductLeap 15.2 (21d5db08-3a39-5ab6-b5ba-84a468db7b15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31997 vulnerable 2026-06-08 05:31:54.547525 python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root
MEDIUM (6.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2-lp152.1.2 and prior versions. openSUSE Factory python-postorius version 1.3.4-2.1 and prior versions.
Published: 2021-06-10T11:35:11.799Z
Updated: 2024-09-16T23:22:17.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25322 vulnerable 2026-06-08 05:30:40.665039 python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root
MEDIUM (6.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root. This issue affects: openSUSE Leap 15.2 python-HyperKitty version 1.3.2-lp152.2.3.1 and prior versions. openSUSE Factory python-HyperKitty versions prior to 1.3.4-5.1.
Published: 2021-06-10T11:45:11.776Z
Updated: 2024-09-17T03:02:08.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25321 vulnerable 2026-06-08 05:30:40.663636 arpwatch: Local privilege escalation from runtime user to root
HIGH (7.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
Published: 2021-06-30T08:25:12.750Z
Updated: 2024-09-16T18:43:24.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.