Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE 15 SP7: 2025:01534-1 low severity: augeas NULL pointer issue

suse
Calendar Grey June 9, 2025
Dist Suse Esm H88
The recent Augeas update for SUSE resolves a minor vulnerability identified as CVE-2025-2588. Please adhere to the provided installation and update guidelines.
* bsc#1239909 Cross-References: * CVE-2025-2588

Summary

## This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-1534=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1

Topics%20covered

Topics Covered

security advisory software update low severity threat mitigation SUSE Linux augeas

References

* bsc#1239909

Cross-

* CVE-2025-2588

CVSS scores:

* CVE-2025-2588 ( SUSE ): 4.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-2588 ( NVD ): 4.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products:

* Basesystem Module 15-SP7

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:01534-1
Release Date: 2025-06-09T13:28:25Z
Rating: low

Topics%20covered

Topics Covered

security advisory software update low severity threat mitigation SUSE Linux augeas

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here