openSUSE-SU-2026:20495-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20495-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:20495-1

Upstream

CVE (2)

CVE-2025-14104
CVE-2026-3184

Related

CVE (2)

CVE-2025-14104
CVE-2026-3184

Published

2026-04-09T13:00:19Z

Modified

2026-04-22T20:06:45Z

Summary

Security update for util-linux

Details

This update for util-linux fixes the following issues:

Security issues:

CVE-2025-14104: heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666).
CVE-2026-3184: access control bypass due to improper hostname canonicalization in login (bsc#1258859).

Non security issues:

fdisk: Fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465).
lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

References

Affected packages

openSUSE:Leap 16.0 / python-libmount

Package

Name: python-libmount
Purl: pkg:rpm/opensuse/python-libmount&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.41.1-160000.3.1

Ecosystem specific

{
    "binaries": [
        {
            "lastlog2": "2.41.1-160000.3.1",
            "libblkid-devel": "2.41.1-160000.3.1",
            "libblkid-devel-static": "2.41.1-160000.3.1",
            "libblkid1": "2.41.1-160000.3.1",
            "libfdisk-devel": "2.41.1-160000.3.1",
            "libfdisk-devel-static": "2.41.1-160000.3.1",
            "libfdisk1": "2.41.1-160000.3.1",
            "liblastlog2-2": "2.41.1-160000.3.1",
            "liblastlog2-devel": "2.41.1-160000.3.1",
            "libmount-devel": "2.41.1-160000.3.1",
            "libmount-devel-static": "2.41.1-160000.3.1",
            "libmount1": "2.41.1-160000.3.1",
            "libsmartcols-devel": "2.41.1-160000.3.1",
            "libsmartcols-devel-static": "2.41.1-160000.3.1",
            "libsmartcols1": "2.41.1-160000.3.1",
            "libuuid-devel": "2.41.1-160000.3.1",
            "libuuid-devel-static": "2.41.1-160000.3.1",
            "libuuid1": "2.41.1-160000.3.1",
            "python313-libmount": "2.41.1-160000.3.1",
            "util-linux": "2.41.1-160000.3.1",
            "util-linux-extra": "2.41.1-160000.3.1",
            "util-linux-lang": "2.41.1-160000.3.1",
            "util-linux-systemd": "2.41.1-160000.3.1",
            "util-linux-tty-tools": "2.41.1-160000.3.1",
            "uuidd": "2.41.1-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20495-1.json"

openSUSE:Leap 16.0 / util-linux

Package

Name: util-linux
Purl: pkg:rpm/opensuse/util-linux&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.41.1-160000.3.1

Ecosystem specific

{
    "binaries": [
        {
            "lastlog2": "2.41.1-160000.3.1",
            "libblkid-devel": "2.41.1-160000.3.1",
            "libblkid-devel-static": "2.41.1-160000.3.1",
            "libblkid1": "2.41.1-160000.3.1",
            "libfdisk-devel": "2.41.1-160000.3.1",
            "libfdisk-devel-static": "2.41.1-160000.3.1",
            "libfdisk1": "2.41.1-160000.3.1",
            "liblastlog2-2": "2.41.1-160000.3.1",
            "liblastlog2-devel": "2.41.1-160000.3.1",
            "libmount-devel": "2.41.1-160000.3.1",
            "libmount-devel-static": "2.41.1-160000.3.1",
            "libmount1": "2.41.1-160000.3.1",
            "libsmartcols-devel": "2.41.1-160000.3.1",
            "libsmartcols-devel-static": "2.41.1-160000.3.1",
            "libsmartcols1": "2.41.1-160000.3.1",
            "libuuid-devel": "2.41.1-160000.3.1",
            "libuuid-devel-static": "2.41.1-160000.3.1",
            "libuuid1": "2.41.1-160000.3.1",
            "python313-libmount": "2.41.1-160000.3.1",
            "util-linux": "2.41.1-160000.3.1",
            "util-linux-extra": "2.41.1-160000.3.1",
            "util-linux-lang": "2.41.1-160000.3.1",
            "util-linux-systemd": "2.41.1-160000.3.1",
            "util-linux-tty-tools": "2.41.1-160000.3.1",
            "uuidd": "2.41.1-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20495-1.json"

openSUSE:Leap 16.0 / util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.41.1-160000.3.1

Ecosystem specific

{
    "binaries": [
        {
            "lastlog2": "2.41.1-160000.3.1",
            "libblkid-devel": "2.41.1-160000.3.1",
            "libblkid-devel-static": "2.41.1-160000.3.1",
            "libblkid1": "2.41.1-160000.3.1",
            "libfdisk-devel": "2.41.1-160000.3.1",
            "libfdisk-devel-static": "2.41.1-160000.3.1",
            "libfdisk1": "2.41.1-160000.3.1",
            "liblastlog2-2": "2.41.1-160000.3.1",
            "liblastlog2-devel": "2.41.1-160000.3.1",
            "libmount-devel": "2.41.1-160000.3.1",
            "libmount-devel-static": "2.41.1-160000.3.1",
            "libmount1": "2.41.1-160000.3.1",
            "libsmartcols-devel": "2.41.1-160000.3.1",
            "libsmartcols-devel-static": "2.41.1-160000.3.1",
            "libsmartcols1": "2.41.1-160000.3.1",
            "libuuid-devel": "2.41.1-160000.3.1",
            "libuuid-devel-static": "2.41.1-160000.3.1",
            "libuuid1": "2.41.1-160000.3.1",
            "python313-libmount": "2.41.1-160000.3.1",
            "util-linux": "2.41.1-160000.3.1",
            "util-linux-extra": "2.41.1-160000.3.1",
            "util-linux-lang": "2.41.1-160000.3.1",
            "util-linux-systemd": "2.41.1-160000.3.1",
            "util-linux-tty-tools": "2.41.1-160000.3.1",
            "uuidd": "2.41.1-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20495-1.json"