SUSE-SU-2019:2392-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20192392-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2392-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:2392-1

Published

2019-09-17T13:46:48Z

Modified

2019-09-17T13:46:48Z

Summary

Security update for util-linux and shadow

Details

This update for util-linux and shadow fixes the following issues:

util-linux:

Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
Prevent outdated pam files (bsc#1082293).
Do not trim read-only volumes (bsc#1106214).
Integrate pam_keyinit pam module to login (bsc#1081947).
Perform one-time reset of /etc/default/su (bsc#1121197).
Fix problems in reading of login.defs values (bsc#1121197)
libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
raw.service: Add RemainAfterExit=yes (bsc#1135534).
agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).

shadow:

Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
Hardening for su wrappers (bsc#353876)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15

shadow

Package

Name: shadow
Purl: pkg:rpm/suse/shadow&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.5-7.6.4

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.31.1-9.8.1",
            "libblkid-devel-static":  "2.31.1-9.8.1",
            "libblkid1":  "2.31.1-9.8.1",
            "libblkid1-32bit":  "2.31.1-9.8.1",
            "libfdisk-devel":  "2.31.1-9.8.1",
            "libfdisk1":  "2.31.1-9.8.1",
            "libmount-devel":  "2.31.1-9.8.1",
            "libmount1":  "2.31.1-9.8.1",
            "libmount1-32bit":  "2.31.1-9.8.1",
            "libsmartcols-devel":  "2.31.1-9.8.1",
            "libsmartcols1":  "2.31.1-9.8.1",
            "libuuid-devel":  "2.31.1-9.8.1",
            "libuuid-devel-static":  "2.31.1-9.8.1",
            "libuuid1":  "2.31.1-9.8.1",
            "libuuid1-32bit":  "2.31.1-9.8.1",
            "shadow":  "4.5-7.6.4",
            "util-linux":  "2.31.1-9.8.1",
            "util-linux-lang":  "2.31.1-9.8.1",
            "util-linux-systemd":  "2.31.1-9.8.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2392-1.json"

util-linux

Package

Name: util-linux
Purl: pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31.1-9.8.1

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.31.1-9.8.1",
            "libblkid-devel-static":  "2.31.1-9.8.1",
            "libblkid1":  "2.31.1-9.8.1",
            "libblkid1-32bit":  "2.31.1-9.8.1",
            "libfdisk-devel":  "2.31.1-9.8.1",
            "libfdisk1":  "2.31.1-9.8.1",
            "libmount-devel":  "2.31.1-9.8.1",
            "libmount1":  "2.31.1-9.8.1",
            "libmount1-32bit":  "2.31.1-9.8.1",
            "libsmartcols-devel":  "2.31.1-9.8.1",
            "libsmartcols1":  "2.31.1-9.8.1",
            "libuuid-devel":  "2.31.1-9.8.1",
            "libuuid-devel-static":  "2.31.1-9.8.1",
            "libuuid1":  "2.31.1-9.8.1",
            "libuuid1-32bit":  "2.31.1-9.8.1",
            "shadow":  "4.5-7.6.4",
            "util-linux":  "2.31.1-9.8.1",
            "util-linux-lang":  "2.31.1-9.8.1",
            "util-linux-systemd":  "2.31.1-9.8.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2392-1.json"

util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31.1-9.8.1

Ecosystem specific

{
    "binaries":  [
        {
            "libblkid-devel":  "2.31.1-9.8.1",
            "libblkid-devel-static":  "2.31.1-9.8.1",
            "libblkid1":  "2.31.1-9.8.1",
            "libblkid1-32bit":  "2.31.1-9.8.1",
            "libfdisk-devel":  "2.31.1-9.8.1",
            "libfdisk1":  "2.31.1-9.8.1",
            "libmount-devel":  "2.31.1-9.8.1",
            "libmount1":  "2.31.1-9.8.1",
            "libmount1-32bit":  "2.31.1-9.8.1",
            "libsmartcols-devel":  "2.31.1-9.8.1",
            "libsmartcols1":  "2.31.1-9.8.1",
            "libuuid-devel":  "2.31.1-9.8.1",
            "libuuid-devel-static":  "2.31.1-9.8.1",
            "libuuid1":  "2.31.1-9.8.1",
            "libuuid1-32bit":  "2.31.1-9.8.1",
            "shadow":  "4.5-7.6.4",
            "util-linux":  "2.31.1-9.8.1",
            "util-linux-lang":  "2.31.1-9.8.1",
            "util-linux-systemd":  "2.31.1-9.8.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2392-1.json"

SUSE:Linux Enterprise Module for Server Applications 15

util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31.1-9.8.1

Ecosystem specific

{
    "binaries":  [
        {
            "uuidd":  "2.31.1-9.8.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2392-1.json"