Back Linuxsecurity

openSUSE: Fix for CVE-2025

Linuxsecurity •LinuxSecurity Advisories • November 21, 2025

This update for poppler fixes the following issues: - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized (bsc#1251940) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-42=1

- openSUSE Leap 16.0: libpoppler-cpp2-25.04.0-160000.3.1 libpoppler-devel-25.04.0-160000.3.1 libpoppler-glib-devel-25.04.0-160000.3.1 libpoppler-glib8-25.04.0-160000.3.1 libpoppler-qt5-1-25.04.0-160000.3.1 libpoppler-qt5-devel-25.04.0-160000.3.1 libpoppler-qt6-3-25.04.0-160000.3.1 libpoppler-qt6-devel-25.04.0-160000.3.1 libpoppler148-25.04.0-160000.3.1 poppler-tools-25.04.0-160000.3.1 typelib-1_0-Poppler-0_18-25.04.0-160000.3.1

* bsc#1251940References: *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE OpenSSL Update Addresses Out-of-Bounds Vulnerability CVE-2025-9230 SUSE has released updates for OpenSSL addressing an important out-of-bounds read and write vulnerability identified as CVE-2025-9230. This affects both openssl-1_0_0 and openssl-3-livepatches, with specific patch instructions provided for users of openSUSE Leap 15.6 and SUSE Linux Enterprise Live Patching 15-SP7. 25 sources 27

Extracted Entities

CVEs (1)

CVE-2025-52885

Platforms (1)

OpenSUSE Leap 16.0