Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:14693-1

Опубликовано: 14 апр. 2021
Источник: suse-cvrf

Описание

Security update for util-linux

This update for util-linux fixes the following issues:

  • CVE-2015-5218: Prevent colcrt buffer overflow. (bsc#949754)

These non-security issues were fixed:

  • Mount crashes when trying to mount shmfs while SELinux is active. (bsc#1040414)
  • Fix lsblk -f on CCISS and other devices with nodes in /dev subdirectory. (bsc#924994)
  • Fix script(1) hang caused by mis-interpreted EOF on big-endian platforms. (bsc#930236)
  • Do not segfault when TERM is not defined or wrong. (bsc#903440)
  • Update and fix mount XFS documentation. (bsc#925705)
  • Fix recognition of /dev/dm-N partitions names. (bsc#931607)
  • Follow SUSE Linux Enterprise 11 device mapper partition names configuration. (bsc#931607)
  • Fix recognition of device mapper partitions. (bsc#923904)
  • Fix fsck -C {fd} parsing. (bsc#923777, bsc#903738)

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
libblkid1-2.19.1-6.62.7.1
libuuid1-2.19.1-6.62.7.1
util-linux-2.19.1-6.62.7.1
util-linux-lang-2.19.1-6.62.7.1
uuid-runtime-2.19.1-6.62.7.1

Ссылки

Описание

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libblkid1-2.19.1-6.62.7.1
SUSE Linux Enterprise Point of Sale 11 SP3:libuuid1-2.19.1-6.62.7.1
SUSE Linux Enterprise Point of Sale 11 SP3:util-linux-2.19.1-6.62.7.1
SUSE Linux Enterprise Point of Sale 11 SP3:util-linux-lang-2.19.1-6.62.7.1
Ссылки