Security update for util-linux SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0115-1 Final 1 1 2026-01-12T15:03:44Z current 2026-01-12T15:03:44Z 2026-01-12T15:03:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2026-115,openSUSE-SLE-15.6-2026-115 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260115-1/ Link for SUSE-SU-2026:0115-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023734.html E-Mail link for SUSE-SU-2026:0115-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1254666 SUSE Bug 1254666 https://www.suse.com/security/cve/CVE-2025-14104/ SUSE CVE CVE-2025-14104 page openSUSE Leap 15.6 libblkid-devel-2.39.3-150600.4.15.1 libblkid-devel-32bit-2.39.3-150600.4.15.1 libblkid-devel-64bit-2.39.3-150600.4.15.1 libblkid-devel-static-2.39.3-150600.4.15.1 libblkid1-2.39.3-150600.4.15.1 libblkid1-32bit-2.39.3-150600.4.15.1 libblkid1-64bit-2.39.3-150600.4.15.1 libfdisk-devel-2.39.3-150600.4.15.1 libfdisk-devel-32bit-2.39.3-150600.4.15.1 libfdisk-devel-64bit-2.39.3-150600.4.15.1 libfdisk-devel-static-2.39.3-150600.4.15.1 libfdisk1-2.39.3-150600.4.15.1 libfdisk1-32bit-2.39.3-150600.4.15.1 libfdisk1-64bit-2.39.3-150600.4.15.1 libmount-devel-2.39.3-150600.4.15.1 libmount-devel-32bit-2.39.3-150600.4.15.1 libmount-devel-64bit-2.39.3-150600.4.15.1 libmount-devel-static-2.39.3-150600.4.15.1 libmount1-2.39.3-150600.4.15.1 libmount1-32bit-2.39.3-150600.4.15.1 libmount1-64bit-2.39.3-150600.4.15.1 libsmartcols-devel-2.39.3-150600.4.15.1 libsmartcols-devel-32bit-2.39.3-150600.4.15.1 libsmartcols-devel-64bit-2.39.3-150600.4.15.1 libsmartcols-devel-static-2.39.3-150600.4.15.1 libsmartcols1-2.39.3-150600.4.15.1 libsmartcols1-32bit-2.39.3-150600.4.15.1 libsmartcols1-64bit-2.39.3-150600.4.15.1 libuuid-devel-2.39.3-150600.4.15.1 libuuid-devel-32bit-2.39.3-150600.4.15.1 libuuid-devel-64bit-2.39.3-150600.4.15.1 libuuid-devel-static-2.39.3-150600.4.15.1 libuuid1-2.39.3-150600.4.15.1 libuuid1-32bit-2.39.3-150600.4.15.1 libuuid1-64bit-2.39.3-150600.4.15.1 python3-libmount-2.39.3-150600.4.15.1 util-linux-2.39.3-150600.4.15.1 util-linux-extra-2.39.3-150600.4.15.1 util-linux-lang-2.39.3-150600.4.15.1 util-linux-systemd-2.39.3-150600.4.15.1 util-linux-tty-tools-2.39.3-150600.4.15.1 uuidd-2.39.3-150600.4.15.1 libblkid-devel-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libblkid-devel-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libblkid-devel-static-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libblkid1-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libblkid1-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libfdisk-devel-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libfdisk-devel-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libfdisk-devel-static-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libfdisk1-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libfdisk1-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libmount-devel-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libmount-devel-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libmount-devel-static-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libmount1-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libmount1-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libsmartcols-devel-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libsmartcols-devel-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libsmartcols-devel-static-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libsmartcols1-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libsmartcols1-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libuuid-devel-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libuuid-devel-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libuuid-devel-static-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libuuid1-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 libuuid1-32bit-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 python3-libmount-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 util-linux-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 util-linux-lang-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 util-linux-systemd-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 util-linux-tty-tools-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 uuidd-2.39.3-150600.4.15.1 as a component of openSUSE Leap 15.6 A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database. CVE-2025-14104 openSUSE Leap 15.6:libblkid-devel-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libblkid-devel-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libblkid-devel-static-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libblkid1-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libblkid1-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libfdisk-devel-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libfdisk-devel-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libfdisk-devel-static-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libfdisk1-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libfdisk1-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libmount-devel-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libmount-devel-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libmount-devel-static-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libmount1-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libmount1-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libsmartcols-devel-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libsmartcols-devel-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libsmartcols-devel-static-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libsmartcols1-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libsmartcols1-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libuuid-devel-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libuuid-devel-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libuuid-devel-static-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libuuid1-2.39.3-150600.4.15.1 openSUSE Leap 15.6:libuuid1-32bit-2.39.3-150600.4.15.1 openSUSE Leap 15.6:python3-libmount-2.39.3-150600.4.15.1 openSUSE Leap 15.6:util-linux-2.39.3-150600.4.15.1 openSUSE Leap 15.6:util-linux-lang-2.39.3-150600.4.15.1 openSUSE Leap 15.6:util-linux-systemd-2.39.3-150600.4.15.1 openSUSE Leap 15.6:util-linux-tty-tools-2.39.3-150600.4.15.1 openSUSE Leap 15.6:uuidd-2.39.3-150600.4.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260115-1/ https://www.suse.com/security/cve/CVE-2025-14104.html CVE-2025-14104 https://bugzilla.suse.com/1254666 SUSE Bug 1254666