Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

openSUSE: Flannel Important Security Updates Advisory 2025:0491-1

opensuse
Calendar Grey December 31, 2025
Dist Opensuse Esm H88
Important update for openSUSE to resolve multiple issues in Flannel. Secure your deployments with these fixes now.
An update that fixes three vulnerabilities is now available.

Description

This update for flannel fixes the following issues:

- Update to version 0.27.4:

* Removed PodSecurityPolicy manifest creation

* Fix interface IP address detection in dual-stack mode

* Fix: recreate VXLAN device (flannel.*) when external interface is

deleted and re-added (#2247)

* golangci-lint: fix iptables_test

* firewall: add option to disable fully-random mode for MASQUERADE

* Bump the tencent group with 2 updates

* Bump github.com/coreos/go-systemd/v22 in the other-go-modules group

* Bump golang.org/x/sys in the other-go-modules group

* Bump the etcd group with 4 updates

* Bump etcd version in tests

* Stop using deprecated cache.NewIndexerInformer function

* Bump k8s test version

* Bump k8s deps to v0.31.11

* Bump the other-go-modules group with 2 updates

* helm chart: add nodeSelector in the helm chart

* Updated Alpine image

* Added flag to enable blackhole route locally for Canal

...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP6:

zypper in -t patch openSUSE-2025-491=1

Package List

- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64):

flannel-0.27.4-bp156.4.3.1

- openSUSE Backports SLE-15-SP6 (noarch):

flannel-k8s-yaml-0.27.4-bp156.4.3.1

References

https://www.suse.com/security/cve/CVE-2019-14697.html

https://www.suse.com/security/cve/CVE-2023-45288.html

https://www.suse.com/security/cve/CVE-2025-30204.html

https://bugzilla.suse.com/1218694

https://bugzilla.suse.com/1236522

https://bugzilla.suse.com/1240516

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2025:0491-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here