<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: opensuse-tumbleweed</title><description>Every new CVE for opensuse-tumbleweed.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104618: sdbootutil: world-readable debug log</title><link>https://agentprime.io/advisories/CVE-2026-104618/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104618/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 08:41:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104617: sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/&lt;pid&gt;/cmdline</title><link>https://agentprime.io/advisories/CVE-2026-104617/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104617/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 08:33:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59674: LPE from suricata user to root due to chown in %post in suricata packaging</title><link>https://agentprime.io/advisories/CVE-2026-59674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59674/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 07:32:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41051: csync2 uses insecure temporary directories when compiled with C99 or later</title><link>https://agentprime.io/advisories/CVE-2026-41051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41051/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 May 2026 08:37:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-62875: Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock</title><link>https://agentprime.io/advisories/CVE-2025-62875/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62875/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Nov 2025 16:02:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53881: SUSE-specific logrotate configuration allows escalation from mail user/group to root</title><link>https://agentprime.io/advisories/CVE-2025-53881/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53881/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Oct 2025 13:51:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46810: openSUSE Tumbleweed: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE…</title><link>https://agentprime.io/advisories/CVE-2025-46810/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46810/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Sep 2025 11:34:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53882: The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess</title><link>https://agentprime.io/advisories/CVE-2025-53882/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53882/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Jul 2025 09:31:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23394: daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root</title><link>https://agentprime.io/advisories/CVE-2025-23394/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23394/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 May 2025 15:34:32 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-23386: gerbera: Privilege escalation from user gerbera to root because of insecure %post script</title><link>https://agentprime.io/advisories/CVE-2025-23386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23386/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Apr 2025 09:42:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-49504: grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images</title><link>https://agentprime.io/advisories/CVE-2024-49504/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49504/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 14:44:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-49505: XSS vulnerability found in OpenSuse MirrorCache</title><link>https://agentprime.io/advisories/CVE-2024-49505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49505/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 14:21:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-49506: Fixed temporary file path in aeon-checks allows fixing of disk encryption key</title><link>https://agentprime.io/advisories/CVE-2024-49506/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49506/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 14:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-22034: Crafted projects can overwrite special files in the .osc config directory</title><link>https://agentprime.io/advisories/CVE-2024-22034/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22034/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 13:46:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-22033: obs-service-download_url is vulnerable to argument injection</title><link>https://agentprime.io/advisories/CVE-2024-22033/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22033/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 13:42:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32190: mlocate&apos;s %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable</title><link>https://agentprime.io/advisories/CVE-2023-32190/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32190/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 12:03:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32183: Incorrect default permissions in openSUSE Tumbleweed</title><link>https://agentprime.io/advisories/CVE-2023-32183/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32183/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jul 2023 08:11:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-31250: keylime %post scriplet allows for privilege escalation from keylime user to root</title><link>https://agentprime.io/advisories/CVE-2022-31250/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31250/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Jul 2022 07:55:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-8025: outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues</title><link>https://agentprime.io/advisories/CVE-2020-8025/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-8025/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2020 10:10:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-8026: inn: non-root owned files</title><link>https://agentprime.io/advisories/CVE-2020-8026/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-8026/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2020 09:25:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-8014: kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage</title><link>https://agentprime.io/advisories/CVE-2020-8014/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-8014/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2020 12:00:23 GMT</pubDate><category>CVE</category></item></channel></rss>