CVE-2025-53881: SUSE-specific logrotate configuration allows escalation from mail user/group to root
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
eximto a version that resolves this vulnerability.Fixed in 4.98.2-lp156.248.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53881?
The severity of CVE-2025-53881 is considered high due to its potential for privilege escalation.
How do I fix CVE-2025-53881?
To fix CVE-2025-53881, upgrade your SUSE exim package to version 4.98.2-lp156.248.1 or later.
Which systems are affected by CVE-2025-53881?
CVE-2025-53881 affects SUSE exim versions prior to 4.98.2-lp156.248.1.
What type of vulnerability is CVE-2025-53881?
CVE-2025-53881 is a UNIX Symbolic Link (Symlink) Following vulnerability.
What are the consequences of CVE-2025-53881?
The consequences of CVE-2025-53881 include the potential for privilege escalation from the mail user/group to root.