NIXPKGS-2025-0008
published on 19 Sep 2025
by @Erethon Activity log
- Created automatic suggestion
- @Erethon accepted
- @Erethon published on GitHub
python-mailmans logrotate configuration allows potential escalation from mailman to root
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Affected products
mailman3
- <3.3.10-2.1
Matching in nixpkgs
pkgs.python311Packages.django-mailman3
Django library for Mailman UIs
-
nixos-unstable mailman3-1.3.15
- nixpkgs-unstable mailman3-1.3.15
- nixos-unstable-small mailman3-1.3.15
pkgs.python312Packages.django-mailman3
Django library for Mailman UIs
-
nixos-unstable mailman3-1.3.15
- nixpkgs-unstable mailman3-1.3.15
- nixos-unstable-small mailman3-1.3.15
Package maintainers
-
@alyssais Alyssa Ross <hi@alyssa.is>