Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 10 articles for you...
100
security advisorymoderateutil-linuxopenSUSE Memory Security Issue - Util-linux Advisory 2026-0510-2 Risk
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for util-linux Announcement ID: SUSE-SU-2026:0510-1 Release Date: 2026-02-13T14:52:46Z Rating: moderate References: * bsc#1254666 * jsc#PED-13682 Cross-References: * CVE-2025-14104 CVSS scores: * CVE-2025-14104 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-14104 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2025-14104 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). * lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-510=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-510=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-510=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-510=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-510=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libuuid-devel-2.37.2-150400.8.38.1 * python3-libmount-debugsource-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 *util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libmount-devel-static-2.37.2-150400.8.38.1 * libblkid-devel-static-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libfdisk-devel-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libblkid-devel-2.37.2-150400.8.38.1 * libsmartcols-devel-static-2.37.2-150400.8.38.1 * python3-libmount-debuginfo-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libfdisk-devel-static-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * uuidd-debuginfo-2.37.2-150400.8.38.1 * libuuid-devel-static-2.37.2-150400.8.38.1 * python3-libmount-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * libmount-devel-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * uuidd-2.37.2-150400.8.38.1 * libsmartcols-devel-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * openSUSE Leap 15.4 (x86_64) * libmount1-32bit-debuginfo-2.37.2-150400.8.38.1 * libsmartcols1-32bit-debuginfo-2.37.2-150400.8.38.1 * libmount1-32bit-2.37.2-150400.8.38.1 * libfdisk1-32bit-debuginfo-2.37.2-150400.8.38.1 * libblkid-devel-32bit-2.37.2-150400.8.38.1 * libfdisk-devel-32bit-2.37.2-150400.8.38.1 * libuuid-devel-32bit-2.37.2-150400.8.38.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.38.1 * libblkid1-32bit-2.37.2-150400.8.38.1 * libmount-devel-32bit-2.37.2-150400.8.38.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.38.1 * libuuid1-32bit-2.37.2-150400.8.38.1 * libfdisk1-32bit-2.37.2-150400.8.38.1 * libsmartcols1-32bit-2.37.2-150400.8.38.1 * libsmartcols-devel-32bit-2.37.2-150400.8.38.1 * openSUSE Leap 15.4(noarch) * util-linux-lang-2.37.2-150400.8.38.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libuuid-devel-64bit-2.37.2-150400.8.38.1 * libblkid-devel-64bit-2.37.2-150400.8.38.1 * libmount1-64bit-debuginfo-2.37.2-150400.8.38.1 * libuuid1-64bit-debuginfo-2.37.2-150400.8.38.1 * libmount-devel-64bit-2.37.2-150400.8.38.1 * libuuid1-64bit-2.37.2-150400.8.38.1 * libmount1-64bit-2.37.2-150400.8.38.1 * libfdisk1-64bit-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-64bit-2.37.2-150400.8.38.1 * libsmartcols1-64bit-2.37.2-150400.8.38.1 * libblkid1-64bit-2.37.2-150400.8.38.1 * libsmartcols1-64bit-debuginfo-2.37.2-150400.8.38.1 * libblkid1-64bit-debuginfo-2.37.2-150400.8.38.1 * libfdisk-devel-64bit-2.37.2-150400.8.38.1 * libsmartcols-devel-64bit-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14104.html *https://bugzilla.suse.com/show_bug.cgi?id=1254666 * https://jira.suse.com/browse/PED-13682 . Update for util-linux addresses heap buffer overread issue in openSUSE, rated as moderate severity.. openSUSE security, util-linux update, heap buffer overread. . LinuxSecurity.com Team
Feb 13, 2026
SuSE
202
security advisorymoderateupdateopenSUSE: CVE-2025-14104 Moderate Heap Overread Vulnerability 2026:0117-1
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for util-linux Announcement ID: SUSE-SU-2026:0117-1 Release Date: 2026-01-13T04:33:44Z Rating: moderate References: * bsc#1254666 * jsc#PED-13682 Cross-References: * CVE-2025-14104 CVSS scores: * CVE-2025-14104 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-14104 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2025-14104 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). * lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-117=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-117=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-117=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * util-linux-2.37.4-150500.9.20.1 * libblkid1-2.37.4-150500.9.20.1 * libsmartcols1-debuginfo-2.37.4-150500.9.20.1 * libuuid1-2.37.4-150500.9.20.1 * libmount1-2.37.4-150500.9.20.1 * libmount1-debuginfo-2.37.4-150500.9.20.1 * libsmartcols1-2.37.4-150500.9.20.1 * util-linux-systemd-2.37.4-150500.9.20.1 * util-linux-systemd-debugsource-2.37.4-150500.9.20.1 * util-linux-debugsource-2.37.4-150500.9.20.1 *util-linux-debuginfo-2.37.4-150500.9.20.1 * libfdisk1-2.37.4-150500.9.20.1 * libblkid1-debuginfo-2.37.4-150500.9.20.1 * libuuid1-debuginfo-2.37.4-150500.9.20.1 * util-linux-systemd-debuginfo-2.37.4-150500.9.20.1 * libfdisk1-debuginfo-2.37.4-150500.9.20.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * util-linux-extra-2.37.4-150500.9.20.1 * util-linux-extra-debuginfo-2.37.4-150500.9.20.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libblkid-devel-2.37.4-150500.9.20.1 * util-linux-2.37.4-150500.9.20.1 * libfdisk-devel-static-2.37.4-150500.9.20.1 * libuuid1-2.37.4-150500.9.20.1 * python3-libmount-debuginfo-2.37.4-150500.9.20.1 * python3-libmount-2.37.4-150500.9.20.1 * libmount-devel-static-2.37.4-150500.9.20.1 * uuidd-2.37.4-150500.9.20.1 * libblkid1-2.37.4-150500.9.20.1 * libuuid-devel-2.37.4-150500.9.20.1 * libsmartcols-devel-2.37.4-150500.9.20.1 * libsmartcols1-2.37.4-150500.9.20.1 * util-linux-systemd-2.37.4-150500.9.20.1 * util-linux-debugsource-2.37.4-150500.9.20.1 * util-linux-debuginfo-2.37.4-150500.9.20.1 * libmount-devel-2.37.4-150500.9.20.1 * libuuid1-debuginfo-2.37.4-150500.9.20.1 * util-linux-systemd-debugsource-2.37.4-150500.9.20.1 * uuidd-debuginfo-2.37.4-150500.9.20.1 * libfdisk1-debuginfo-2.37.4-150500.9.20.1 * libblkid-devel-static-2.37.4-150500.9.20.1 * python3-libmount-debugsource-2.37.4-150500.9.20.1 * libsmartcols1-debuginfo-2.37.4-150500.9.20.1 * libmount1-2.37.4-150500.9.20.1 * libmount1-debuginfo-2.37.4-150500.9.20.1 * libuuid-devel-static-2.37.4-150500.9.20.1 * libfdisk1-2.37.4-150500.9.20.1 * libblkid1-debuginfo-2.37.4-150500.9.20.1 * libfdisk-devel-2.37.4-150500.9.20.1 * libsmartcols-devel-static-2.37.4-150500.9.20.1 * util-linux-systemd-debuginfo-2.37.4-150500.9.20.1 * openSUSE Leap 15.5 (x86_64) * libuuid1-32bit-debuginfo-2.37.4-150500.9.20.1 * libsmartcols-devel-32bit-2.37.4-150500.9.20.1 *libmount1-32bit-2.37.4-150500.9.20.1 * libblkid-devel-32bit-2.37.4-150500.9.20.1 * libblkid1-32bit-2.37.4-150500.9.20.1 * libfdisk1-32bit-debuginfo-2.37.4-150500.9.20.1 * libfdisk-devel-32bit-2.37.4-150500.9.20.1 * libmount-devel-32bit-2.37.4-150500.9.20.1 * libmount1-32bit-debuginfo-2.37.4-150500.9.20.1 * libsmartcols1-32bit-debuginfo-2.37.4-150500.9.20.1 * libuuid1-32bit-2.37.4-150500.9.20.1 * libsmartcols1-32bit-2.37.4-150500.9.20.1 * libfdisk1-32bit-2.37.4-150500.9.20.1 * libblkid1-32bit-debuginfo-2.37.4-150500.9.20.1 * libuuid-devel-32bit-2.37.4-150500.9.20.1 * openSUSE Leap 15.5 (noarch) * util-linux-lang-2.37.4-150500.9.20.1 * openSUSE Leap 15.5 (s390x) * util-linux-extra-2.37.4-150500.9.20.1 * util-linux-extra-debuginfo-2.37.4-150500.9.20.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libsmartcols-devel-64bit-2.37.4-150500.9.20.1 * libblkid1-64bit-2.37.4-150500.9.20.1 * libfdisk-devel-64bit-2.37.4-150500.9.20.1 * libblkid1-64bit-debuginfo-2.37.4-150500.9.20.1 * libuuid1-64bit-2.37.4-150500.9.20.1 * libsmartcols1-64bit-debuginfo-2.37.4-150500.9.20.1 * libmount1-64bit-2.37.4-150500.9.20.1 * libsmartcols1-64bit-2.37.4-150500.9.20.1 * libmount-devel-64bit-2.37.4-150500.9.20.1 * libuuid-devel-64bit-2.37.4-150500.9.20.1 * libfdisk1-64bit-debuginfo-2.37.4-150500.9.20.1 * libblkid-devel-64bit-2.37.4-150500.9.20.1 * libmount1-64bit-debuginfo-2.37.4-150500.9.20.1 * libfdisk1-64bit-2.37.4-150500.9.20.1 * libuuid1-64bit-debuginfo-2.37.4-150500.9.20.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-libmount-debugsource-2.37.4-150500.9.20.1 * openSUSE Leap 15.6 (s390x) * util-linux-extra-2.37.4-150500.9.20.1 * util-linux-extra-debuginfo-2.37.4-150500.9.20.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14104.html * https://bugzilla.suse.com/show_bug.cgi?id=1254666 * https://jira.suse.com/browse/PED-13682 . An openSUSE security advisory forutil-linux addresses a moderate heap overread vulnerability with recommended fixes.. openSUSE util-linux heap overflow update security. . LinuxSecurity.com Team
Jan 13, 2026
OpenSUSE
202
security advisorymoderatebuffer overflowopenSUSE Leap 15.6: util-linux Moderate Heap Buffer Overread 2026:0115-1
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for util-linux Announcement ID: SUSE-SU-2026:0115-1 Release Date: 2026-01-12T15:03:44Z Rating: moderate References: * bsc#1254666 * jsc#PED-13682 Cross-References: * CVE-2025-14104 CVSS scores: * CVE-2025-14104 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-14104 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2025-14104 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). * lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-115=1 openSUSE-SLE-15.6-2026-115=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libmount1-2.39.3-150600.4.15.1 * libblkid-devel-2.39.3-150600.4.15.1 * libfdisk-devel-static-2.39.3-150600.4.15.1 * libuuid-devel-static-2.39.3-150600.4.15.1 * python3-libmount-debuginfo-2.39.3-150600.4.15.1 * libmount1-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-static-2.39.3-150600.4.15.1 * uuidd-2.39.3-150600.4.15.1 * libsmartcols1-2.39.3-150600.4.15.1 * util-linux-systemd-debugsource-2.39.3-150600.4.15.1 * libfdisk1-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-2.39.3-150600.4.15.1 * libsmartcols-devel-2.39.3-150600.4.15.1 * libblkid1-debuginfo-2.39.3-150600.4.15.1 *util-linux-tty-tools-2.39.3-150600.4.15.1 * libblkid-devel-static-2.39.3-150600.4.15.1 * libfdisk-devel-2.39.3-150600.4.15.1 * uuidd-debuginfo-2.39.3-150600.4.15.1 * libuuid-devel-2.39.3-150600.4.15.1 * util-linux-2.39.3-150600.4.15.1 * util-linux-tty-tools-debuginfo-2.39.3-150600.4.15.1 * libmount-devel-static-2.39.3-150600.4.15.1 * libblkid1-2.39.3-150600.4.15.1 * libmount-devel-2.39.3-150600.4.15.1 * util-linux-debuginfo-2.39.3-150600.4.15.1 * util-linux-debugsource-2.39.3-150600.4.15.1 * libuuid1-2.39.3-150600.4.15.1 * util-linux-systemd-2.39.3-150600.4.15.1 * util-linux-systemd-debuginfo-2.39.3-150600.4.15.1 * libsmartcols1-debuginfo-2.39.3-150600.4.15.1 * python3-libmount-2.39.3-150600.4.15.1 * libuuid1-debuginfo-2.39.3-150600.4.15.1 * python-libmount-debugsource-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (x86_64) * libblkid1-32bit-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-32bit-debuginfo-2.39.3-150600.4.15.1 * libmount1-32bit-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-32bit-2.39.3-150600.4.15.1 * libuuid-devel-32bit-2.39.3-150600.4.15.1 * libblkid-devel-32bit-2.39.3-150600.4.15.1 * libfdisk-devel-32bit-2.39.3-150600.4.15.1 * libuuid1-32bit-2.39.3-150600.4.15.1 * libsmartcols1-32bit-debuginfo-2.39.3-150600.4.15.1 * libmount1-32bit-2.39.3-150600.4.15.1 * libsmartcols1-32bit-2.39.3-150600.4.15.1 * libuuid1-32bit-debuginfo-2.39.3-150600.4.15.1 * libblkid1-32bit-2.39.3-150600.4.15.1 * libfdisk1-32bit-2.39.3-150600.4.15.1 * libmount-devel-32bit-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (noarch) * util-linux-lang-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (s390x) * util-linux-extra-debuginfo-2.39.3-150600.4.15.1 * util-linux-extra-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libblkid-devel-64bit-2.39.3-150600.4.15.1 * libblkid1-64bit-2.39.3-150600.4.15.1 * libfdisk1-64bit-debuginfo-2.39.3-150600.4.15.1 *libsmartcols1-64bit-2.39.3-150600.4.15.1 * libfdisk-devel-64bit-2.39.3-150600.4.15.1 * libsmartcols1-64bit-debuginfo-2.39.3-150600.4.15.1 * libuuid-devel-64bit-2.39.3-150600.4.15.1 * libuuid1-64bit-2.39.3-150600.4.15.1 * libmount1-64bit-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-64bit-2.39.3-150600.4.15.1 * libmount-devel-64bit-2.39.3-150600.4.15.1 * libmount1-64bit-2.39.3-150600.4.15.1 * libblkid1-64bit-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-64bit-2.39.3-150600.4.15.1 * libuuid1-64bit-debuginfo-2.39.3-150600.4.15.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14104.html * https://bugzilla.suse.com/show_bug.cgi?id=1254666 * https://jira.suse.com/browse/PED-13682 . Update for util-linux addresses heap buffer overread issue related to usernames, rated as moderate severity.. openSUSE util-linux buffer overread security update. . LinuxSecurity.com Team
Jan 12, 2026
OpenSUSE
100
security advisorybuffer overflowSuSESUSE: gnutls Important Buffer Overflow Fix Advisory CVE-2025-32988
* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 . # Security update for gnutls Announcement ID: SUSE-SU-2025:20563-1 Release Date: 2025-08-20T11:49:18Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2025-32988: Fixed double-free due to incorrect ownership handling (bsc#1246232) * CVE-2025-32989: Fixed heap buffer overread during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fixed 1-byte heap buffer overflow when parsing templates with certtool(bsc#1246267) * CVE-2025-6395: Fixed NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-426=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libgnutls30-3.8.3-4.1 * gnutls-debuginfo-3.8.3-4.1 * gnutls-debugsource-3.8.3-4.1 * gnutls-3.8.3-4.1 * libgnutls30-debuginfo-3.8.3-4.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . Critical security updates for gnutls in SUSE have been released, addressing multiple vulnerabilities. Prompt installation is recommended to maintain system integrity and guard against threats. SUSE update gnutls vulnerabilities security fix. . Severity: Important. LinuxSecurity.com Team
Aug 28, 2025
•Important
SuSE
202
security advisorybuffer overflowimportantopenSUSE Leap 15.4: gnutls Important Heap Overflow Fix 2025:02589-1
An update that solves four vulnerabilities can now be installed.. # Security update for gnutls Announcement ID: SUSE-SU-2025:02589-1 Release Date: 2025-08-01T13:06:32Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) * CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232) * CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2589=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2589=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2589=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2589=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patchSUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2589=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2589=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2589=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2589=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2589=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2589=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2589=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2589=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * openSUSE Leap 15.4 (x86_64) * libgnutls-devel-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgnutls30-64bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-64bit-3.7.3-150400.4.50.1 * libgnutls30-hmac-64bit-3.7.3-150400.4.50.1 * libgnutls30-64bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) *gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 *gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) *gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 *libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Manager Proxy 4.3 (x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Server 4.3 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . An important security patch for gnutls in openSUSE resolves various issues, enhancing your system's protection.. openSUSE security update, gnutls vulnerabilities, Linux patch management. . Severity: Important. LinuxSecurity.com Team
Aug 01, 2025
•Important
OpenSUSE
100
security advisorybuffer overflowSuSESUSE: Critical Security Update for gnutls CVE-2025-32988 Vulnerabilities
* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 . # Security update for gnutls Announcement ID: SUSE-SU-2025:02595-1 Release Date: 2025-08-01T15:14:08Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: *CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) * CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232) * CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-2595=1 openSUSE-SLE-15.6-2025-2595=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2595=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2595=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 * gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * openSUSE Leap 15.6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls-devel-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libgnutls30-64bit-3.8.3-150600.4.9.1 * libgnutls30-64bit-debuginfo-3.8.3-150600.4.9.1 * libgnutls-devel-64bit-3.8.3-150600.4.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 *gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 * gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP7 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . Important security patch for OpenSSL resolving several weaknesses in Ubuntu Linux distributions. Ensure your devices are secure.. gnutls security update,SUSE important advisory,critical vulnerabilities patch,buffer overflow fix,heap overread vulnerability. . Severity: Important. LinuxSecurity.com Team
Aug 01, 2025
•Important
SuSE
217
security advisorysecurity fixsecurity issuesOracle Linux 7 ELSA-2024-2080 critical: tigervnc heap overread
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-2080 http://linux.oracle.com/errata/ELSA-2024-2080.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-server-module-1.8.0-33.0.1.el7_9.aarch64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates//tigervnc-1.8.0-33.0.1.el7_9.src.rpm Related CVEs: CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 Description of changes: [1.8.0-33.0.1] - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch, xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch, xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch, xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch, xorg-CVE-2024-31083-followup.patch [1.8.0-33] - Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30976 [1.8.0-32] - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves: RHEL-31006 - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs Resolves: RHEL-30976 - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice Resolves: RHEL-30993 _______________________________________________ El-errata mailing list
Apr 30, 2024
•Critical
Oracle
89
security advisoryFedoracritical updateFedora 38 2024-1706127797 Critical: Xwayland Issues and Fixes
CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-1706127797 2024-04-24 01:36:11.409612 -------------------------------------------------------------------------------- Name : xorg-x11-server-Xwayland Product : Fedora 38 Version : 22.1.9 Release : 7.fc38 URL : https://www.x.org/wiki/ Summary : Xwayland Description : Xwayland is an X server for running X clients under Wayland. -------------------------------------------------------------------------------- Update Information: CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083 -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 9 2024 Olivier Fourdan - 22.1.9-7 Fix for a regression introduced with the fix for CVE-2024-31083 https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659 * Thu Apr 4 2024 Olivier Fourdan - 22.1.9-6 CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 Fix for copy/paste error in previous CVE fix Fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2271997 - CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents https://bugzilla.redhat.com/show_bug.cgi?id=2271997 [ 2 ] Bug #2271998 - CVE-2024-31081 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice https://bugzilla.redhat.com/show_bug.cgi?id=2271998 [ 3 ] Bug #2272000 - CVE-2024-31083 xorg-x11-server: User-after-free in ProcRenderAddGlyphs https://bugzilla.redhat.com/show_bug.cgi?id=2272000 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-1706127797' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 24, 2024
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!