Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

SUSE Linux Server 15 SP7: 2025:01548-1 moderate: rabbitmq-server313 XSS

suse
Calendar Grey June 11, 2025
Dist Suse Esm H88
The latest patch for rabbitmq-server313 mitigates an XSS vulnerability in SUSE Linux, categorized as moderate severity.
* bsc#1231656 * bsc#1234763 * bsc#1240071 Cross-References:

Summary

## This update for rabbitmq-server313 fixes the following issues: * CVE-2025-30219: incorrectly escaped virtual hostname present in error message could lead to XSS attack. (bsc#1240071) Non-security fixes: * Require rabbitmq-server313-plugins rather then rabbitmq-server-plugins. (bsc#1231656, bsc#1234763) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-1548=1 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rabbitmq-server313-3.13.1-150600.13.8.1

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE server application rabbitmq

References

* bsc#1231656

* bsc#1234763

* bsc#1240071

Cross-

* CVE-2025-30219

CVSS scores:

* CVE-2025-30219 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

* CVE-2025-30219 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:L

* CVE-2025-30219 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:L

Affected Products:

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability and has two security fixes can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2025-30219.html

* https://bugzilla.suse.com/show_bug.cgi?id=1231656

* https://bugzilla.suse.com/show_bug.cgi?id=1234763

Announcement ID: SUSE-SU-2025:01548-1
Release Date: 2025-06-11T12:47:31Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE server application rabbitmq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here