Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

openSUSE Leap 15.3: util-linux Moderate Buffer Overread CVE-2025-14104

opensuse
Calendar Grey January 13, 2026
Dist Opensuse Esm H88
Update for util-linux resolves a buffer overread vulnerability. Install recommended patches for improved security.
An update that solves one vulnerability and contains one feature can now be installed.

Description

This update for util-linux fixes the following issues:

* CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing

256-byte usernames (bsc#1254666).

* lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

Topics%20covered

Topics Covered

security advisory moderate util-linux OpenSUSE patch instructions buffer overread

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.3

zypper in -t patch SUSE-2026-116=1

* SUSE Linux Enterprise Micro 5.2

zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-116=1

* SUSE Linux Enterprise Micro for Rancher 5.2

zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-116=1

Package List

* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)

* libblkid1-debuginfo-2.36.2-150300.4.50.1

* libblkid1-2.36.2-150300.4.50.1

* python3-libmount-2.36.2-150300.4.50.1

* libuuid1-2.36.2-150300.4.50.1

* libsmartcols1-2.36.2-150300.4.50.1

* libblkid-devel-static-2.36.2-150300.4.50.1

* uuidd-2.36.2-150300.4.50.1

* python3-libmount-debuginfo-2.36.2-150300.4.50.1

* libsmartcols-devel-2.36.2-150300.4.50.1

* util-linux-debuginfo-2.36.2-150300.4.50.1

* libfdisk-devel-2.36.2-150300.4.50.1

* uuidd-debuginfo-2.36.2-150300.4.50.1

* util-linux-2.36.2-150300.4.50.1

* libsmartcols-devel-static-2.36.2-150300.4.50.1

* libmount-devel-static-2.36.2-150300.4.50.1

* libfdisk-devel-static-2.36.2-150300.4.50.1

* util-linux-systemd-2.36.2-150300.4.50.1

* libblkid-devel-2.36.2-150300.4.50.1

* libfdisk1-debuginfo-2.36.2-150300.4.50.1

* util-linux-systemd-debuginfo-2.36.2-150300.4.50.1

* libuuid1-debuginfo-2.36.2-150300.4.50.1

* libmount-devel-2.36.2-150300.4.50.1

* util-linux-debugsource-2.36.2-150300.4.50.1

*...

Read the Full Advisory

References

* bsc#1254666

* jsc#PED-13682

## References:

* https://www.suse.com/security/cve/CVE-2025-14104.html

* https://bugzilla.suse.com/show_bug.cgi?id=1254666

* https://jira.suse.com/browse/PED-13682

Announcement ID: SUSE-SU-2026:0116-1
Release Date: 2026-01-13T02:33:45Z
Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2

Topics%20covered

Topics Covered

security advisory moderate util-linux OpenSUSE patch instructions buffer overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.