SUSE-SU-2024:1171-1

Опубликовано: 09 апр. 2024

Источник: suse-cvrf

Описание

Security update for util-linux

This update for util-linux fixes the following issues:

CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

Container suse/sles12sp5:latest

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

Image SLES12-SP5-Azure-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-Azure-Basic-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-Azure-HPC-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-Azure-HPC-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-Azure-SAP-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-Azure-SAP-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-Azure-Standard-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-EC2-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-EC2-ECS-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-EC2-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-EC2-SAP-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-EC2-SAP-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-GCE-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-GCE-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

Image SLES12-SP5-GCE-SAP-BYOS

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-GCE-SAP-On-Demand

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libblkid1-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

SUSE Linux Enterprise Server 12 SP5

libblkid1-2.33.2-4.36.1

libblkid1-32bit-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libmount1-32bit-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

libuuid1-32bit-2.33.2-4.36.1

python-libmount-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-lang-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libblkid1-2.33.2-4.36.1

libblkid1-32bit-2.33.2-4.36.1

libfdisk1-2.33.2-4.36.1

libmount1-2.33.2-4.36.1

libmount1-32bit-2.33.2-4.36.1

libsmartcols1-2.33.2-4.36.1

libuuid1-2.33.2-4.36.1

libuuid1-32bit-2.33.2-4.36.1

python-libmount-2.33.2-4.36.1

util-linux-2.33.2-4.36.1

util-linux-lang-2.33.2-4.36.1

util-linux-systemd-2.33.2-4.36.1

uuidd-2.33.2-4.36.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libblkid-devel-2.33.2-4.36.1

libmount-devel-2.33.2-4.36.1

libsmartcols-devel-2.33.2-4.36.1

libuuid-devel-2.33.2-4.36.1

SUSE Linux Enterprise Workstation Extension 12 SP5

libuuid-devel-2.33.2-4.36.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241171-1/
Link for SUSE-SU-2024:1171-1
https://lists.suse.com/pipermail/sle-updates/2024-April/034903.html
E-Mail link for SUSE-SU-2024:1171-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1221831
SUSE Bug 1221831
https://www.suse.com/security/cve/CVE-2024-28085/
SUSE CVE CVE-2024-28085 page

Описание

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

Затронутые продукты

Container suse/ltss/sle12.5/sles12sp5:latest:libblkid1-2.33.2-4.36.1

Container suse/ltss/sle12.5/sles12sp5:latest:libfdisk1-2.33.2-4.36.1

Container suse/ltss/sle12.5/sles12sp5:latest:libmount1-2.33.2-4.36.1

Container suse/ltss/sle12.5/sles12sp5:latest:libsmartcols1-2.33.2-4.36.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-28085.html
CVE-2024-28085
https://bugzilla.suse.com/1221831
SUSE Bug 1221831

SUSE-SU-2024:1171-1

Описание

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest

Container suse/sles12sp5:latest

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE Linux Enterprise Workstation Extension 12 SP5

Ссылки

Уязвимость: CVE-2024-28085

Описание

Затронутые продукты

Ссылки