This update for util-linux fixes the following issue
* CVE-2026-27456: TOCTOU in the mount program when setting up loop devices
(bsc#1261606).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-2653=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-2653=1
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-2653=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-2653=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-2653=1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* libfdisk1-2.37.2-150400.8.47.1
* python3-libmount-debuginfo-2.37.2-150400.8.47.1
* libmount1-2.37.2-150400.8.47.1
* libuuid-devel-2.37.2-150400.8.47.1
* python3-libmount-2.37.2-150400.8.47.1
* libuuid1-debuginfo-2.37.2-150400.8.47.1
* util-linux-systemd-2.37.2-150400.8.47.1
* libblkid1-debuginfo-2.37.2-150400.8.47.1
* libsmartcols-devel-static-2.37.2-150400.8.47.1
* libblkid-devel-static-2.37.2-150400.8.47.1
* uuidd-2.37.2-150400.8.47.1
* libmount1-debuginfo-2.37.2-150400.8.47.1
* python3-libmount-debugsource-2.37.2-150400.8.47.1
* libsmartcols1-2.37.2-150400.8.47.1
* libfdisk1-debuginfo-2.37.2-150400.8.47.1
* libfdisk-devel-2.37.2-150400.8.47.1
* libsmartcols1-debuginfo-2.37.2-150400.8.47.1
* util-linux-debugsource-2.37.2-150400.8.47.1
* util-linux-systemd-debugsource-2.37.2-150400.8.47.1
* libblkid-devel-2.37.2-150400.8.47.1
* libuuid1-2.37.2-150400.8.47.1
* libsmartcols-devel-2.37.2-150400.8.47.1
* libuuid-devel-static-2.37.2-150400.8.47.1
*...
Read the Full Advisory* bsc#1261606
## References:
* https://www.suse.com/security/cve/CVE-2026-27456.html
* https://bugzilla.suse.com/show_bug.cgi?id=1261606
Get the latest Linux and open source security news straight to your inbox.