{
  "cveId": "CVE-2025-54882",
  "url": "https://patchblox.com/security/cve/CVE-2025-54882",
  "summary": "CVE-2025-54882 is fixed in himmelblau on 1 platform, first by SUSE-FU-2026:20990-1, released April 1, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "himmelblau: This update for himmelblau fixes the following issues:\n\nUpdate to version 2.3.9\u002Bgit0.a9fd29b; (jsc#PED-14511):\n\n- CVE...",
  "description": "This update for himmelblau fixes the following issues:\n\nUpdate to version 2.3.9\u002Bgit0.a9fd29b; (jsc#PED-14511):\n\n- CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324).\n- CVE-2026-31979: Fix race condition when accessiung /tmp/krb5cc_uid (bsc#1259548).\n- CVE-2026-25727: deps(rust): Bump the \u0060all-cargo-updates\u0060 group with 8 updates (bsc#1257904).\n- CVE-2025-58160: deps(rust): Bump \u0060tracing-subscriber\u0060 in the cargo group (bsc#1249013).\n- CVE-2025-54882: Fix Kerberos credential cache permissions (bsc#1247735).\n- CVE-2025-53013: Fix permitted authentication with invalid Hello PIN (bsc#1245437).\n- CVE-2024-11738: Fix \u0060rustls\u0060 network-reachable panic in \u0060Acceptor::accept\u0060 (bsc#1233949).\n\nOther bug fixes:\n\n- Fix SELinux module packaging to use standard policy macros (bsc#1258236).",
  "published": "2026-04-01T09:19:25Z",
  "severity": "",
  "epss": 0.00252,
  "epssPercentile": 0.16763,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.3.8\u002Bgit0.dec3693-160000.1.1",
      "fix": "OPENSUSE-FU-2026:20453-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-fu-2026-20453-1",
      "released": "2026-04-01T09:26:05Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "sles 15.7",
      "fixedVersion": "2.3.9\u002Bgit0.a9fd29b-150700.3.15.1",
      "fix": "SUSE-SU-2026:1361-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1361-1",
      "released": "2026-04-15T14:14:00Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "sles 16.0",
      "fixedVersion": "2.3.8\u002Bgit0.dec3693-160000.1.1",
      "fix": "SUSE-FU-2026:20990-1",
      "url": "https://patchblox.com/security/fix/linux/suse-fu-2026-20990-1",
      "released": "2026-04-01T09:19:25Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}