Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-2605

Опубликовано: 09 нояб. 2016
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2016-2605: util-linux security, bug fix, and enhancement update (LOW)

[2.23.2-33.0.1]

  • fix Oracle bug 23001516 - backport lscpu: correct the Virtualization type on Xen DomU PV guest
  • Reviewed-by: Joe Jin joe.jin@oracle.com

[2.23.2-33]

  • improve patch for #1007734 (libblkid realpaths)

[2.23.2-32]

  • improve patch for chrt(1) deadline support #1298384
  • fix #1007734 - blkid shows devices as /dev/block/:
  • fix #1349536 - Extended partition loop in MBR partition table leads to DOS

[2.23.2-31]

  • improve spec file for #1092520

[2.23.2-30]

  • improve patch for chrt(1) deadline support #1298384
  • improve regression tests

[2.23.2-29]

  • fix #1029385 - lack of non-ascii support
  • fix #1092520 - util-linux - PIE and RELRO check
  • fix #1153770 - backport lsipc
  • fix #1248003 - mount only parses = lines from fstab fs_spec field available from blkid block device
  • fix #1271850 - mount -a doesn't catch a typo in /etc/fstab and a typo in /etc/fstab can make a system not reboot properly
  • fix #1281839 - [RFE]Bind mounts should be handled gracefully by the operating system
  • fix #1290689 - util-linux: /bin/login does not retry getpwnam_r with larger buffers, leading to login failure
  • fix #1296366 - Bash completion for more(1) handles file names with spaces incorrectly
  • fix #1296521 - RHEL7: update audit event in hwclock
  • fix #1298384 - RFE: add SCHED_DEADLINE support to chrt
  • fix #1304246 - fdisk 'f' subcommand updates partition ranges wrongly
  • fix #1304426 - [rfe] /bin/su should be improved to reduce stack use
  • fix #1326615 - util-linux/lscpu: Fix model and model name on Power Systems
  • fix #1327886 - Backport blkdiscard's '-z' flag to RHEL
  • fix #1332084 - [RFE] Inclusion of lsns command in util-linux Package
  • fix #1335671 - extra quotes around UUID confuses findfs in RHEL (but not in Fedora)
  • fix #1344222 - logger port option in help is misleading
  • fix #1344482 - util-linux fails valid_pmbr() size checks if device is > 2.14TB, Device label type: dos instead of gpt
  • fix #587393 - [RFE] Make sure util-linux is ready for writable overlays

[2.23.2-28]

  • fix #1291554 - lslogins crash when executed with buggy username

[2.23.2-27]

  • fix #1301091 - [libblkid] Failed to get offset of the xfs_external_log signature

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

libblkid

2.23.2-33.0.1.el7

libblkid-devel

2.23.2-33.0.1.el7

libmount

2.23.2-33.0.1.el7

libmount-devel

2.23.2-33.0.1.el7

libuuid

2.23.2-33.0.1.el7

libuuid-devel

2.23.2-33.0.1.el7

util-linux

2.23.2-33.0.1.el7

uuidd

2.23.2-33.0.1.el7

Связанные CVE

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 8 лет назад

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.

CVSS3: 4.6
redhat
около 9 лет назад

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.

CVSS3: 4.6
nvd
больше 8 лет назад

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.

CVSS3: 4.6
debian
больше 8 лет назад

The parse_dos_extended function in partitions/dos.c in the libblkid li ...

suse-cvrf
больше 8 лет назад

Security update for util-linux