Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 10 articles for you...
100
security advisorymoderatesecurity issueSUSE Linux Micro 6.1: SUSE-SU-2025:20415-1 moderate: augeas NULL pointer
* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:20415-1 Release Date: 2025-06-11T10:00:25Z Rating: moderate References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Fixed NULL pointer dereference when calling re_case_expand in function fa_expand_nocase (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-143=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libfa1-debuginfo-1.14.1-slfo.1.1_2.1 * augeas-debuginfo-1.14.1-slfo.1.1_2.1 * libfa1-1.14.1-slfo.1.1_2.1 * augeas-debugsource-1.14.1-slfo.1.1_2.1 * libaugeas0-1.14.1-slfo.1.1_2.1 * libaugeas0-debuginfo-1.14.1-slfo.1.1_2.1 * augeas-1.14.1-slfo.1.1_2.1 * augeas-lenses-1.14.1-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 .SUSE reveals critical patch for augeas addressing CVE-2025-2588, set to launch on June 11, 2025.. SUSE Linux, augeas security, CVE-2025-2588, system update, NULL pointer. . LinuxSecurity.com Team
Jun 20, 2025
SuSE
100
security advisorysoftware updatelow severitySUSE 15 SP7: 2025:01534-1 low severity: augeas NULL pointer issue
* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:01534-1 Release Date: 2025-06-09T13:28:25Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-1534=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * augeas-devel-1.14.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . The recent Augeas update for SUSE resolves a minor vulnerability identified as CVE-2025-2588. Please adhere to the provided installation and update guidelines.. SUSE Linux, augeas, security update, patch instructions, software security. . Severity: Low. LinuxSecurity.com Team
Jun 09, 2025
•Low
SuSE
100
security advisorylow severityNULL pointerSUSE 12 SP5: 2025:01754-1 low severity: augeas NULL pointer issue
* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:01754-1 Release Date: 2025-05-29T14:19:21Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-1754=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * augeas-debugsource-1.10.1-4.6.1 * augeas-1.10.1-4.6.1 * libaugeas0-1.10.1-4.6.1 * augeas-lenses-1.10.1-4.6.1 * libaugeas0-debuginfo-1.10.1-4.6.1 * augeas-devel-1.10.1-4.6.1 * augeas-debuginfo-1.10.1-4.6.1 ##References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . Notice regarding SUSE patch for CVE-2025-2588 affecting augeas has been released. Ensure installation for enhanced protection.. SUSE augeas update, low severity security alert, NULL pointer fix, mitigation techniques. . Severity: Low. LinuxSecurity.com Team
May 29, 2025
•Low
SuSE
202
security advisorysoftware updatelow severityopenSUSE Leap 15.6: 2025:1534-1 low: augeas NULL pointer issue
An update that solves one vulnerability can now be installed.. # Security update for augeas Announcement ID: SUSE-SU-2025:1534-1 Release Date: 2025-05-12T16:01:07Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1534=1 openSUSE-SLE-15.6-2025-1534=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1534=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * augeas-devel-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 *augeas-lense-tests-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * augeas-bash-completion-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * augeas-devel-32bit-1.14.1-150600.3.3.1 * libfa1-32bit-1.14.1-150600.3.3.1 * libaugeas0-32bit-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-32bit-1.14.1-150600.3.3.1 * libfa1-32bit-debuginfo-1.14.1-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libfa1-64bit-1.14.1-150600.3.3.1 * libaugeas0-64bit-debuginfo-1.14.1-150600.3.3.1 * libfa1-64bit-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-64bit-1.14.1-150600.3.3.1 * augeas-devel-64bit-1.14.1-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * augeas-devel-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . Patch for augeas released, tackling a minor-severity vulnerability impacting several openSUSE versions.. SUSE Security Update, Augeas Software Fix, CVE-2025-2588, openSUSE Patch, Low Severity Issue. . Severity: Low. LinuxSecurity.com Team
May 12, 2025
•Low
OpenSUSE
100
security advisoryDoSlow severitySUSE: 2025:1534-1 low severity: augeas NULL pointer issue
* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:1534-1 Release Date: 2025-05-12T16:01:07Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1534=1 openSUSE-SLE-15.6-2025-1534=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1534=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * augeas-devel-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * augeas-lense-tests-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * augeas-bash-completion-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * augeas-devel-32bit-1.14.1-150600.3.3.1 * libfa1-32bit-1.14.1-150600.3.3.1 * libaugeas0-32bit-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-32bit-1.14.1-150600.3.3.1 * libfa1-32bit-debuginfo-1.14.1-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libfa1-64bit-1.14.1-150600.3.3.1 * libaugeas0-64bit-debuginfo-1.14.1-150600.3.3.1 * libfa1-64bit-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-64bit-1.14.1-150600.3.3.1 * augeas-devel-64bit-1.14.1-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * augeas-devel-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . Attention users: Augeas software has been updated to address CVE-2025-2588, rated as low severity. SUSE users should follow the patch instructions for security. SUSE Update, augeas Security, low severity patch, SUSE CVE-2025-2588, security advisory. . Severity: Low. LinuxSecurity.com Team
May 12, 2025
•Low
SuSE
202
security advisorysecurity issuelow severityopenSUSE 15.4: 2025:1413-1 low: augeas null pointer check
An update that solves one vulnerability can now be installed.. # Security update for augeas Announcement ID: SUSE-SU-2025:1413-1 Release Date: 2025-04-30T06:59:13Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1413=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1413=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1413=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1413=1 * SUSE Linux Enterprise Micro for Rancher5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1413=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1413=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * augeas-devel-1.12.0-150400.3.8.1 * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * augeas-lense-tests-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (x86_64) * augeas-devel-32bit-1.12.0-150400.3.8.1 * libaugeas0-32bit-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-32bit-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libaugeas0-64bit-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-64bit-1.12.0-150400.3.8.1 * augeas-devel-64bit-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 *augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . SUSE issued a minor advisory concerning augeas in relation to CVE-2025-2588. It is advised to update impacted systems.. openSUSE updates, augeas security, SUSE vulnerabilities, patch management, low severity threat. . Severity: Low. LinuxSecurity.com Team
Apr 30, 2025
•Low
OpenSUSE
100
security advisorysoftware updatelow severitySUSE Linux Enterprise Micro: 2025:1413-1 low: augeas NULL pointer fix
* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:1413-1 Release Date: 2025-04-30T06:59:13Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1413=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1413=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1413=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1413=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1413=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1413=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * augeas-devel-1.12.0-150400.3.8.1 * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * augeas-lense-tests-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (x86_64) * augeas-devel-32bit-1.12.0-150400.3.8.1 * libaugeas0-32bit-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-32bit-1.12.0-150400.3.8.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libaugeas0-64bit-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-64bit-1.12.0-150400.3.8.1 * augeas-devel-64bit-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 *libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * augeas-debuginfo-1.12.0-150400.3.8.1 * libaugeas0-debuginfo-1.12.0-150400.3.8.1 * augeas-debugsource-1.12.0-150400.3.8.1 * libaugeas0-1.12.0-150400.3.8.1 * augeas-1.12.0-150400.3.8.1 * augeas-lenses-1.12.0-150400.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . Patches have been released for SUSE Linux Enterprise Micro and openSUSE Leap to resolve a null pointer dereference vulnerability in Augeas, classified as low severity.. SUSE Linux Enterprise, Augeas Security, Software Patch Update, Linux Security Advisory. . Severity: Low. LinuxSecurity.com Team
Apr 30, 2025
•Low
SuSE
89
security advisorybuffer overflowFedoraFedora 42: augeas 2025-6b5c54bd05 Security Advisory Updates
CVE-2025-2588. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6b5c54bd05 2025-03-28 00:15:35.878868+00:00 -------------------------------------------------------------------------------- Name : augeas Product : Fedora 42 Version : 1.14.2 Release : 0.4.20250324git4dffa3d.fc42 URL : https://github.com/rwmjones/augeas Summary : A library for changing configuration files Description : A library for programmatically editing configuration files. Augeas parses configuration files into a tree structure, which it exposes through its public API. Changes made through the API are written back to the initially read files. The transformation works very hard to preserve comments and formatting details. It is controlled by ``lens' definitions that describe the file format and the transformation into a tree. -------------------------------------------------------------------------------- Update Information: CVE-2025-2588 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 24 2025 Alexander Bokovoy - 1.14.2-0.4 - rhbz#235444: CVE-2025-2588 * Mon Feb 24 2025 Richard W.M. Jones - 1.14.2-0.3 - Move to fork of Augeas which contains a small number of PRs: - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf - lenses/multipath.aug: Support all possible values for find_multipaths - lenses/systemd.aug: Allow "+"(fullprivileges) command flag -------------------------------------------------------------------------------- References: [ 1 ] Bug #2354446 - CVE-2025-2588 augeas: Hercules Augeas fa.c re_case_expand null pointer dereference [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2354446 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6b5c54bd05' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 28, 2025
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!