SUSE-SU-2022:0727-2

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20220727-2/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-2.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:0727-2
Upstream
Related
Published
2022-04-19T19:21:16Z
Modified
2026-02-04T02:44:51Z
Summary
Security update for libeconf, shadow and util-linux
Details

This security update for libeconf, shadow and util-linux fix the following issues:

libeconf:

  • Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

Issues fixed in libeconf:

  • Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)
  • Fixed different issues while writing string values to file.
  • Writing comments to file too.
  • Fixed crash while merging values.
  • Added econftool cat option (#146)
  • new API call: econf_readDirsHistory (showing ALL locations)
  • new API call: econf_getPath (absolute path of the configuration file)
  • Man pages libeconf.3 and econftool.8.
  • Handling multiline strings.
  • Added libeconf_ext which returns more information like line_nr, comments, path of the configuration file,...
  • Econftool, an command line interface for handling configuration files.
  • Generating HTML API documentation with doxygen.
  • Improving error handling and semantic file check.
  • Joining entries with the same key to one single entry if env variable ECONF_JOIN_SAME_ENTRIES has been set.

shadow:

  • The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

util-linux:

  • The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)
  • Allow use of larger values for start sector to prevent blockdev --report aborting (bsc#1188507)
  • Fixed blockdev --report using non-space characters as a field separator (bsc#1188507)
  • CVE-2021-3995: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)
  • CVE-2021-3996: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)
References

Affected packages

SUSE:Linux Enterprise Micro 5.2
libeconf

Package

Name
libeconf
Purl
pkg:rpm/suse/libeconf&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.4.4+git20220104.962774f-150300.3.6.2

Ecosystem specific 

{
    "binaries": [
        {
            "libblkid1": "2.36.2-150300.4.14.3",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "shadow": "4.8.1-150300.4.3.8",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-2.json"
shadow

Package

Name
shadow
Purl
pkg:rpm/suse/shadow&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.8.1-150300.4.3.8

Ecosystem specific 

{
    "binaries": [
        {
            "libblkid1": "2.36.2-150300.4.14.3",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "shadow": "4.8.1-150300.4.3.8",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-2.json"
util-linux

Package

Name
util-linux
Purl
pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.36.2-150300.4.14.3

Ecosystem specific 

{
    "binaries": [
        {
            "libblkid1": "2.36.2-150300.4.14.3",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "shadow": "4.8.1-150300.4.3.8",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-2.json"
util-linux-systemd

Package

Name
util-linux-systemd
Purl
pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.36.2-150300.4.14.2

Ecosystem specific 

{
    "binaries": [
        {
            "libblkid1": "2.36.2-150300.4.14.3",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "shadow": "4.8.1-150300.4.3.8",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-2.json"