Description
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | openSUSE Tumbleweed | ? – < 3.3.10-2.1 | 3.3.10-2.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-mailman | 3.3.10-2.1 | openSUSE-SU-2025:15344-1 |
Advisories 1
- openSUSE-SU-2025:15344-1 mailman3-3.3.10-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026