SUSE-SU-2025:03039-1
Recommended update for nginx
No scoreFix available
SUSE-SU-2025:03039-1 is a vulnerability with no CVSS score yet in nginx, published September 1, 2025. No source lists public exploit code. Fixed in nginx 1.21.5-150600.10.9.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.21.5-150600.10.9.1nginx +2 more
Description
This update for nginx fixes the following issues:
- Drop root priviledges while running logrotate (bsc#1246090)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nginxSUSE:Linux Enterprise Module for Server Applications 15 SP6 | before 1.21.5-150600.10.9.1 | 1.21.5-150600.10.9.1 |
nginxSUSE:Linux Enterprise Module for Server Applications 15 SP7 | before 1.21.5-150600.10.9.1 | 1.21.5-150600.10.9.1 |
nginxopenSUSE:Leap 15.6 | before 1.21.5-150600.10.9.1 | 1.21.5-150600.10.9.1 |
What each source reports
OSVNo score
Recommended update for nginx
This update for nginx fixes the following issues:
- Drop root priviledges while running logrotate (bsc#1246090)
- Record
SUSE-SU-2025:03039-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.