Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

openSUSE Leap 16.0: flake-pilot Moderate Update 2025-20000-1 CVE-2025-55159

opensuse
Calendar Grey November 3, 2025
Dist Opensuse Esm H88
A critical openSUSE update resolves a moderate security issue in flake-pilot with various bug fixes outlined.
An update that solves one vulnerability and has one bug fix can now be installed.

Description

This update for flake-pilot fixes the following issues:

Update version to 3.1.22.

- Fixes to use flakes as normal user

Running a flake is a container based instance provisioning

and startup. Some part of this process requires root permissions

for example mounting the container instance store for the

provisioning step. This commit fixes the required calls to

be properly managed by sudo.

- seed from entropy

- Fix assignment of random sequence number

We should use a seed for the sequence as described in

https://rust-random.github.io/book/guide-seeding.html#a-simple-number

In addition the logic when a random sequence number should

be used was wrong and needed a fix regarding resume and

attach type flakes which must not use a random sequence

- Pass --init option for resume type flakes

In resume mode a sleep command is used to keep the container

open. However, without the --init option there is no signal

handling available. This commit fixes it

- Revert...

Read the Full Advisory

Patch

Package List

- openSUSE Leap 16.0:

flake-pilot-3.1.22-160000.1.1

flake-pilot-firecracker-3.1.22-160000.1.1

flake-pilot-firecracker-dracut-netstart-3.1.22-160000.1.1

flake-pilot-firecracker-guestvm-tools-3.1.22-160000.1.1

flake-pilot-podman-3.1.22-160000.1.1

References

* bsc#1248004

References:

* https://www.suse.com/security/cve/CVE-2025-55159.html

Announcement ID: openSUSE-SU-2025-20000-1
Rating: moderate
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here