CVE-2025-50327: n/a

CVE-2025-50327 refers to multiple security issues in the zpaqfranz package version 61.3 and earlier, as included in openSUSE Tumbleweed. The vulnerabilities were addressed in the zpaqfranz-64.8-1.1 package update. The CVSS 3.1 score of 8.8 reflects network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The issues relate to the SUSE product and certain architectures and versions. The vulnerabilities correspond to CWE-693.

The vulnerabilities allow an attacker to impact confidentiality, integrity, and availability of the affected system with high severity. The attack can be performed remotely over the network with low complexity and no privileges, but requires user interaction. Successful exploitation could lead to significant compromise of the affected system.

The vulnerabilities have been fixed in the zpaqfranz-64.8-1.1 package. Users should update to this fixed version or later to remediate the issues. Since this is not a cloud service, remediation depends on applying the updated package provided by the vendor. Patch status is confirmed as fixed in the specified package version.