Every CVESearch/Get API key

SUSE-SU-2025:03039-1

Recommended update for nginx

No scoreFix available

SUSE-SU-2025:03039-1 is a vulnerability with no CVSS score yet in nginx, published September 1, 2025. No source lists public exploit code. Fixed in nginx 1.21.5-150600.10.9.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.21.5-150600.10.9.1nginx +2 more

Description

This update for nginx fixes the following issues:

  • Drop root priviledges while running logrotate (bsc#1246090)

Affected packages

Affected packages
PackageAffectedFixed
nginx
SUSE:Linux Enterprise Module for Server Applications 15 SP6
before 1.21.5-150600.10.9.1
1.21.5-150600.10.9.1
nginx
SUSE:Linux Enterprise Module for Server Applications 15 SP7
before 1.21.5-150600.10.9.1
1.21.5-150600.10.9.1
nginx
openSUSE:Leap 15.6
before 1.21.5-150600.10.9.1
1.21.5-150600.10.9.1

What each source reports

OSVNo score

Recommended update for nginx

This update for nginx fixes the following issues:

  • Drop root priviledges while running logrotate (bsc#1246090)
Record
SUSE-SU-2025:03039-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open