An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:21293-1 Release Date: 2026-04-22T17:00:43Z Rating: important References: * bsc#1255066 * bsc#1259859 Cross-References: * CVE-2025-40309 * CVE-2026-23268 CVSS scores: * CVE-2025-40309 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: * CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-355=1 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-25-default-19-1.2 * kernel-livepatch-6_4_0-25-default-debuginfo-19-1.2 * kernel-livepatch-MICRO-6-0_Update_5-debugsource-19-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-40309.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1255066 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Animportant update for SUSE Linux Micro addresses critical issues in the kernel affecting Bluetooth and user policies.. SUSE Linux Micro update, kernel security, Linux vulnerabilities, important patch, security issues. . Severity: Important. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:1611-1 Release Date: 2026-04-24T14:06:13Z Rating: important References: * bsc#1258396 * bsc#1259859 Cross-References: * CVE-2026-23191 * CVE-2026-23268 CVSS scores: * CVE-2026-23191 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23191 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-23191 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23191 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various securityissues The following security issues were fixed: * CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-1611=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1612=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-1612=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-1614=1 SUSE-2026-1615=1 SUSE-2026-1616=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-1614=1 SUSE-SLE- Module-Live-Patching-15-SP5-2026-1615=1 SUSE-SLE-Module-Live- Patching-15-SP5-2026-1616=1 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_261-default-13-2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_46-debugsource-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-5-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_46-debugsource-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-5-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_116-default-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_116-default-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-8-150500.2.1 *kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-8-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_29-debugsource-13-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_116-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_116-default-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-8-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x) * kernel-livepatch-SLE15-SP5_Update_29-debugsource-13-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23191.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1258396 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Two security issues in the openSUSE kernel can now be patched, addressing local privilege escalation and access issues.. openSUSE kernel patch, SUSE Linux Enterprise security, local privilege escalation. . Severity: Important. LinuxSecurity.com Team
Updated augeas packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: augeas security update Advisory ID: RHSA-2014:0044-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:0044.html Issue date: 2014-01-20 CVE Names: CVE-2013-6412 ==================================================================== 1. Summary: Updated augeas packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses "lenses" as basic building blocks for establishing the mapping from files into the Augeas tree and back. Aflaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world writable, allowing unprivileged local users to modify their content. (CVE-2013-6412) This issue was discovered by the Red Hat Security Response Team. All augeas users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using augeas must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1034261 - CVE-2013-6412 augeas: incorrect permissions set on newly created files 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm x86_64: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: augeas-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm x86_64: augeas-1.0.0-5.el6_5.1.x86_64.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v.6): Source: x86_64: augeas-1.0.0-5.el6_5.1.x86_64.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm ppc64: augeas-debuginfo-1.0.0-5.el6_5.1.ppc.rpm augeas-debuginfo-1.0.0-5.el6_5.1.ppc64.rpm augeas-libs-1.0.0-5.el6_5.1.ppc.rpm augeas-libs-1.0.0-5.el6_5.1.ppc64.rpm s390x: augeas-debuginfo-1.0.0-5.el6_5.1.s390.rpm augeas-debuginfo-1.0.0-5.el6_5.1.s390x.rpm augeas-libs-1.0.0-5.el6_5.1.s390.rpm augeas-libs-1.0.0-5.el6_5.1.s390x.rpm x86_64: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: i386: augeas-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm ppc64: augeas-1.0.0-5.el6_5.1.ppc64.rpm augeas-debuginfo-1.0.0-5.el6_5.1.ppc.rpm augeas-debuginfo-1.0.0-5.el6_5.1.ppc64.rpm augeas-devel-1.0.0-5.el6_5.1.ppc.rpm augeas-devel-1.0.0-5.el6_5.1.ppc64.rpm s390x: augeas-1.0.0-5.el6_5.1.s390x.rpm augeas-debuginfo-1.0.0-5.el6_5.1.s390.rpm augeas-debuginfo-1.0.0-5.el6_5.1.s390x.rpm augeas-devel-1.0.0-5.el6_5.1.s390.rpm augeas-devel-1.0.0-5.el6_5.1.s390x.rpm x86_64: augeas-1.0.0-5.el6_5.1.x86_64.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm x86_64: augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-libs-1.0.0-5.el6_5.1.i686.rpm augeas-libs-1.0.0-5.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): Source: i386: augeas-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm x86_64: augeas-1.0.0-5.el6_5.1.x86_64.rpm augeas-debuginfo-1.0.0-5.el6_5.1.i686.rpm augeas-debuginfo-1.0.0-5.el6_5.1.x86_64.rpm augeas-devel-1.0.0-5.el6_5.1.i686.rpm augeas-devel-1.0.0-5.el6_5.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2013-6412 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFS3V6vXlSAg2UNWIIRApKZAKCL6RzuSRMmBnG53dCxYOd3EIZ7+ACdGge9 Fwsi6gGkQ042GqX++V2R6Yc=9UIu -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Get the latest Linux and open source security news straight to your inbox.