SUSE-SU-2026:23255-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-202623255-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23255-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:23255-1
Upstream
CVE (5)
Related
CVE (5)
Published
2026-08-24T15:02:24Z
Modified
2026-08-31T18:23:36Z
Summary
Security update for util-linux
Details

This update for util-linux fixes the following issues:

Security issues fixed:

  • CVE-2026-13595: heap use-after-free read in libblkid nested partition probing (bsc#1269583).
  • CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606).
  • Several security issues in releases prior to v2.42.2 and v2.41.5 (bsc#1268886).

Other updates and bugfixes:

  • Ignore pam-config error that prevents update failure if common* pam configuration is not symlink to common-*-pc (bsc#1270219).
References

Affected packages

SUSE:Linux Micro 6.1 / util-linux

Package

Name
util-linux
Purl
pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.40.4-slfo.1.1_7.1

Ecosystem specific 

{
    "binaries":  [
        {
            "lastlog2":  "2.40.4-slfo.1.1_7.1",
            "libblkid1":  "2.40.4-slfo.1.1_7.1",
            "libfdisk1":  "2.40.4-slfo.1.1_7.1",
            "liblastlog2-2":  "2.40.4-slfo.1.1_7.1",
            "libmount1":  "2.40.4-slfo.1.1_7.1",
            "libsmartcols1":  "2.40.4-slfo.1.1_7.1",
            "libuuid1":  "2.40.4-slfo.1.1_7.1",
            "util-linux":  "2.40.4-slfo.1.1_7.1",
            "util-linux-systemd":  "2.40.4-slfo.1.1_7.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23255-1.json"

SUSE:Linux Micro 6.1 / util-linux-systemd

Package

Name
util-linux-systemd
Purl
pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.40.4-slfo.1.1_7.1

Ecosystem specific 

{
    "binaries":  [
        {
            "lastlog2":  "2.40.4-slfo.1.1_7.1",
            "libblkid1":  "2.40.4-slfo.1.1_7.1",
            "libfdisk1":  "2.40.4-slfo.1.1_7.1",
            "liblastlog2-2":  "2.40.4-slfo.1.1_7.1",
            "libmount1":  "2.40.4-slfo.1.1_7.1",
            "libsmartcols1":  "2.40.4-slfo.1.1_7.1",
            "libuuid1":  "2.40.4-slfo.1.1_7.1",
            "util-linux":  "2.40.4-slfo.1.1_7.1",
            "util-linux-systemd":  "2.40.4-slfo.1.1_7.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23255-1.json"