{"id":"SUSE-SU-2025:03061-1","aliases":[],"status":"published","title":"Security update for munge","description":"This update for munge fixes the following issues:\n\n- Make `logrotate` work on log as user `munge` to prevent local privilege escalation (bsc#1246088).","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-09-03T15:51:38Z","modified":"2025-09-03T15:51:38Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"munge","fixed_in":["0.5.15-150600.25.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"munge","fixed_in":["0.5.15-150600.25.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"munge","fixed_in":["0.5.15-150600.25.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"munge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-150600.25.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"munge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-150600.25.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"munge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-150600.25.3.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503061-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246088","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2025:03061-1","title":"Security update for munge","description":"This update for munge fixes the following issues:\n\n- Make `logrotate` work on log as user `munge` to prevent local privilege escalation (bsc#1246088).\n","status":"published","published":"2025-09-03T15:51:38Z","modified":"2025-09-03T15:51:38Z","updated_at":"2026-11-02T15:53:57.111474Z"}]}}
