CVE catalog

CVE-2025-5791

UBUNTU-

[CVE catalog]

These are all security issues fixed in the lsd-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

Severity: High · CVSS 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published: Jan 15, 2025, 12:00:00 PM UTC
Updated: Mar 23, 2026, 4:54:01 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.20% · Oct 27, 2026

Projects and upstream resources

Related catalog projects (1)

[rust-lsd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "lsd",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.0-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.2.0-1.1",
      "provider_record_id": "OPENSUSE-SU-2025:15628-1"
    },
    {
      "name": "agama",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17+60.68fdb92ec-26.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "17+60.68fdb92ec-26.1",
      "provider_record_id": "OPENSUSE-SU-2025:15412-1"
    },
    {
      "name": "mirrorsorcerer",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.1.3~1-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.1.3~1-1.1",
      "provider_record_id": "OPENSUSE-SU-2025:15246-1"
    },
    {
      "name": "afterburn",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.0.git21.a73f509-slfo.1.1_1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.1",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "5.9.0.git21.a73f509-slfo.1.1_1.1",
      "provider_record_id": "SUSE-RU-2025:20961-1"
    },
    {
      "name": "afterburn",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.0.git21.a73f509-1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "5.9.0.git21.a73f509-1.1",
      "provider_record_id": "SUSE-RU-2025:21046-1"
    },
    {
      "name": "afterburn",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.8.2-3.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "5.8.2-3.1",
      "provider_record_id": "OPENSUSE-SU-2025:15335-1"
    },
    {
      "name": "rust-users",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.9.1-1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2025-5791"
    },
    {
      "name": "rust-users",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "0.11.0-1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2025-5791"
    },
    {
      "name": "rust-users",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "0.11.0-1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2025-5791"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[openSUSE Tumbleweed]

[afterburn]Unknown
Source package: [afterburn]
Details (1)
- 5.10.0.git73.b97f772-2.1 · x86_64 · tumbleweed
  Fixed · Fixed: 5.8.2-3.1
  pypi · afterburn · opensuse · tumbleweed
[afterburn-dracut]Unknown
Source package: [afterburn]
Details (1)
- 5.10.0.git73.b97f772-2.1 · noarch · tumbleweed
  Unknown · Fixed: 5.8.2-3.1
  Version impact unknown
  pypi · afterburn · opensuse · tumbleweed
[agama]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Fixed · Fixed: 17+60.68fdb92ec-26.1
  pypi · agama · opensuse · tumbleweed
[agama-autoinstall]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-cli]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-cli-bash-completion]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · noarch · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-cli-fish-completion]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · noarch · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-cli-zsh-completion]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · noarch · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-common]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-openapi]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[agama-scripts]Unknown
Source package: [agama]
Details (1)
- 23+278.4096bc82f-53.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17+60.68fdb92ec-26.1
  Version impact unknown
  pypi · agama · opensuse · tumbleweed
[lsd]Unknown
Source package: [lsd]
Details (1)
- 1.2.0-1.5 · x86_64 · tumbleweed
  Fixed · Fixed: 1.2.0-1.1
  pypi · lsd · opensuse · tumbleweed
[mirrorsorcerer]Unknown
Source package: [mirrorsorcerer]
Details (1)
- 0.1.3~1-1.5 · x86_64 · tumbleweed
  Fixed · Fixed: 0.1.3~1-1.1
  pypi · mirrorsorcerer · opensuse · tumbleweed

Observed: Oct 24, 2026, 10:03:14 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]