Description
A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openSUSE | Factory | cyrus-sasl – ≤ 2.1.27-4.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cyrus-sasl | 2.1.27-5.7 | openSUSE-SU-2024:10709-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | cyrus-sasl | 2.1.27-10 | — |
Advisories 1
- openSUSE-SU-2024:10709-1 cyrus-sasl-2.1.27-5.7 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026