SUSE-SU-2019:2307-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20192307-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2307-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:2307-1

Published

2019-09-05T12:45:17Z

Modified

2019-09-05T12:45:17Z

Summary

Security update for util-linux and shadow

Details

This update for util-linux and shadow fixes the following issues:

util-linux:

Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
Prevent outdated pam files (bsc#1082293).
De-duplicate fstrim -A properly (bsc#1127701).
Do not trim read-only volumes (bsc#1106214).
Integrate pam_keyinit pam module to login (bsc#1081947).
Perform one-time reset of /etc/default/su (bsc#1121197).
Fix problems in reading of login.defs values (bsc#1121197)
libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
raw.service: Add RemainAfterExit=yes (bsc#1135534).
agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)
Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).

shadow:

Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
Fix segfault in useradd during setting password inactivity period. (bsc#1141113)
Hardening for su wrappers (bsc#353876)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP1

shadow

Package

Name: shadow
Purl: pkg:rpm/suse/shadow&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.6-3.5.6

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.33.1-4.5.1",
            "libblkid-devel-static":  "2.33.1-4.5.1",
            "libblkid1":  "2.33.1-4.5.1",
            "libblkid1-32bit":  "2.33.1-4.5.1",
            "libfdisk-devel":  "2.33.1-4.5.1",
            "libfdisk1":  "2.33.1-4.5.1",
            "libmount-devel":  "2.33.1-4.5.1",
            "libmount1":  "2.33.1-4.5.1",
            "libmount1-32bit":  "2.33.1-4.5.1",
            "libsmartcols-devel":  "2.33.1-4.5.1",
            "libsmartcols1":  "2.33.1-4.5.1",
            "libuuid-devel":  "2.33.1-4.5.1",
            "libuuid-devel-static":  "2.33.1-4.5.1",
            "libuuid1":  "2.33.1-4.5.1",
            "libuuid1-32bit":  "2.33.1-4.5.1",
            "shadow":  "4.6-3.5.6",
            "util-linux":  "2.33.1-4.5.1",
            "util-linux-lang":  "2.33.1-4.5.1",
            "util-linux-systemd":  "2.33.1-4.5.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2307-1.json"

util-linux

Package

Name: util-linux
Purl: pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.33.1-4.5.1

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.33.1-4.5.1",
            "libblkid-devel-static":  "2.33.1-4.5.1",
            "libblkid1":  "2.33.1-4.5.1",
            "libblkid1-32bit":  "2.33.1-4.5.1",
            "libfdisk-devel":  "2.33.1-4.5.1",
            "libfdisk1":  "2.33.1-4.5.1",
            "libmount-devel":  "2.33.1-4.5.1",
            "libmount1":  "2.33.1-4.5.1",
            "libmount1-32bit":  "2.33.1-4.5.1",
            "libsmartcols-devel":  "2.33.1-4.5.1",
            "libsmartcols1":  "2.33.1-4.5.1",
            "libuuid-devel":  "2.33.1-4.5.1",
            "libuuid-devel-static":  "2.33.1-4.5.1",
            "libuuid1":  "2.33.1-4.5.1",
            "libuuid1-32bit":  "2.33.1-4.5.1",
            "shadow":  "4.6-3.5.6",
            "util-linux":  "2.33.1-4.5.1",
            "util-linux-lang":  "2.33.1-4.5.1",
            "util-linux-systemd":  "2.33.1-4.5.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2307-1.json"

util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.33.1-4.5.1

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.33.1-4.5.1",
            "libblkid-devel-static":  "2.33.1-4.5.1",
            "libblkid1":  "2.33.1-4.5.1",
            "libblkid1-32bit":  "2.33.1-4.5.1",
            "libfdisk-devel":  "2.33.1-4.5.1",
            "libfdisk1":  "2.33.1-4.5.1",
            "libmount-devel":  "2.33.1-4.5.1",
            "libmount1":  "2.33.1-4.5.1",
            "libmount1-32bit":  "2.33.1-4.5.1",
            "libsmartcols-devel":  "2.33.1-4.5.1",
            "libsmartcols1":  "2.33.1-4.5.1",
            "libuuid-devel":  "2.33.1-4.5.1",
            "libuuid-devel-static":  "2.33.1-4.5.1",
            "libuuid1":  "2.33.1-4.5.1",
            "libuuid1-32bit":  "2.33.1-4.5.1",
            "shadow":  "4.6-3.5.6",
            "util-linux":  "2.33.1-4.5.1",
            "util-linux-lang":  "2.33.1-4.5.1",
            "util-linux-systemd":  "2.33.1-4.5.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2307-1.json"

SUSE:Linux Enterprise Module for Server Applications 15 SP1

util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.33.1-4.5.1

Ecosystem specific

{
    "binaries":  [
        {
            "uuidd":  "2.33.1-4.5.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2307-1.json"