Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: Critical Buffer Overflow Vulnerability in Strongswan CVE-2025-62291

suse
Calendar Grey October 29, 2025
Dist Suse Esm H88
This critical update for strongswan on SUSE addresses a buffer overflow security issue for better system security.
* bsc#1251941 Cross-References: * CVE-2025-62291

Summary

## This update for strongswan fixes the following issues: * CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-3855=1 openSUSE-SLE-15.6-2025-3855=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-3855=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3855=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2025-3855=1 ## Package List:

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important strongSwan cve-2025-62291

References

* bsc#1251941

Cross-

* CVE-2025-62291

CVSS scores:

* CVE-2025-62291 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* Basesystem Module 15-SP6

* openSUSE Leap 15.6

* SUSE Linux Enterprise Desktop 15 SP6

* SUSE Linux Enterprise Real Time 15 SP6

* SUSE Linux Enterprise Server 15 SP6

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

* SUSE Linux Enterprise Workstation Extension 15 SP6

* SUSE Package Hub 15 15-SP6

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-62291.html

* https://bugzilla.suse.com/show_bug.cgi?id=1251941

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:3855-1
Release Date: 2025-10-29T14:15:51Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important strongSwan cve-2025-62291

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here