Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

openSUSE 15.5 NetworkManager Moderate Cert Access CVE-2025-9615

suse
Calendar Grey April 17, 2026
Dist Suse Esm H88
A SUSE update fixes a moderate security issue allowing non-admin users to access others' certificates in NetworkManager.
An update that solves one vulnerability can now be installed.

Summary

## This update for NetworkManager fixes the following issue: * CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-1427=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-1427=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * NetworkManager-debuginfo-1.38.6-150500.3.5.1 * libnm0-debuginfo-1.38.6-150500.3.5.1 * NetworkManager-bluetooth-debuginfo-1.38.6-150500.3.5.1 * NetworkManager-debugsource-1.38.6-150500.3.5.1

Topics%20covered

Topics Covered

security advisory moderate OpenSUSE NetworkManager CVE certificate access

References

* bsc#1257359

Cross-

* CVE-2025-9615

CVSS scores:

* CVE-2025-9615 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-9615 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products:

* openSUSE Leap 15.5

* SUSE Linux Enterprise Micro 5.5

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-9615.html

* https://bugzilla.suse.com/show_bug.cgi?id=1257359

Announcement ID: SUSE-SU-2026:1427-1
Release Date: 2026-04-17T09:58:43Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate OpenSUSE NetworkManager CVE certificate access

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here