CVE-2025-53882CWE-807

The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess

Medium · published July 23, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2025-07-23T09:31Z
EPSS history
Timeline
  • 23 JUL 09:31Z
    The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess
    cvelistv5