Security update for util-linux SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0270-1 Final 1 1 2015-02-10T13:40:36Z current 2015-02-10T13:40:36Z 2015-02-10T13:40:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux util-linux was updated to fix one security issue. This security issue was fixed: - CVE-2014-9114: Using crafted block devices (e.g. USB sticks) it was possibly to inject code via libblkid. libblkid was fixed to care about unsafe chars and possible buffer overflow in cache (bnc#907434) This non-security issue was fixed: - libblkid: Reset errno in blkid_probe_get_buffer() to prevent failing probes (e. g. for exFAT) (bnc#908742). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-67,SUSE-SLE-SDK-12-2015-67,SUSE-SLE-SERVER-12-2015-67,SUSE-SLE-WE-12-2015-67 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150270-1/ Link for SUSE-SU-2015:0270-1 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001218.html E-Mail link for SUSE-SU-2015:0270-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/907434 SUSE Bug 907434 https://bugzilla.suse.com/908742 SUSE Bug 908742 https://www.suse.com/security/cve/CVE-2014-9114/ SUSE CVE CVE-2014-9114 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 libblkid1-2.25-10.1 libblkid1-32bit-2.25-10.1 libmount1-2.25-10.1 libmount1-32bit-2.25-10.1 libsmartcols1-2.25-10.1 libuuid-devel-2.25-10.1 libuuid1-2.25-10.1 libuuid1-32bit-2.25-10.1 python-libmount-2.25-10.3 util-linux-2.25-10.1 util-linux-lang-2.25-10.1 util-linux-systemd-2.25-10.1 uuidd-2.25-10.1 libblkid-devel-2.25-10.1 libmount-devel-2.25-10.1 libsmartcols-devel-2.25-10.1 libblkid1-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libblkid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libmount1-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libmount1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libsmartcols1-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libuuid-devel-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libuuid1-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libuuid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 python-libmount-2.25-10.3 as a component of SUSE Linux Enterprise Desktop 12 util-linux-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 util-linux-lang-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 util-linux-systemd-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 uuidd-2.25-10.1 as a component of SUSE Linux Enterprise Desktop 12 libblkid1-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libblkid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libmount1-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libmount1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libsmartcols1-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libuuid1-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libuuid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 python-libmount-2.25-10.3 as a component of SUSE Linux Enterprise Server 12 util-linux-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 util-linux-lang-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 util-linux-systemd-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 uuidd-2.25-10.1 as a component of SUSE Linux Enterprise Server 12 libblkid1-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libblkid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libmount1-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libmount1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libsmartcols1-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libuuid1-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libuuid1-32bit-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 python-libmount-2.25-10.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 util-linux-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 util-linux-lang-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 util-linux-systemd-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 uuidd-2.25-10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libblkid-devel-2.25-10.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libmount-devel-2.25-10.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libsmartcols-devel-2.25-10.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libuuid-devel-2.25-10.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libuuid-devel-2.25-10.1 as a component of SUSE Linux Enterprise Workstation Extension 12 Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 SUSE Linux Enterprise Desktop 12:libblkid1-2.25-10.1 SUSE Linux Enterprise Desktop 12:libblkid1-32bit-2.25-10.1 SUSE Linux Enterprise Desktop 12:libmount1-2.25-10.1 SUSE Linux Enterprise Desktop 12:libmount1-32bit-2.25-10.1 SUSE Linux Enterprise Desktop 12:libsmartcols1-2.25-10.1 SUSE Linux Enterprise Desktop 12:libuuid-devel-2.25-10.1 SUSE Linux Enterprise Desktop 12:libuuid1-2.25-10.1 SUSE Linux Enterprise Desktop 12:libuuid1-32bit-2.25-10.1 SUSE Linux Enterprise Desktop 12:python-libmount-2.25-10.3 SUSE Linux Enterprise Desktop 12:util-linux-2.25-10.1 SUSE Linux Enterprise Desktop 12:util-linux-lang-2.25-10.1 SUSE Linux Enterprise Desktop 12:util-linux-systemd-2.25-10.1 SUSE Linux Enterprise Desktop 12:uuidd-2.25-10.1 SUSE Linux Enterprise Server 12:libblkid1-2.25-10.1 SUSE Linux Enterprise Server 12:libblkid1-32bit-2.25-10.1 SUSE Linux Enterprise Server 12:libmount1-2.25-10.1 SUSE Linux Enterprise Server 12:libmount1-32bit-2.25-10.1 SUSE Linux Enterprise Server 12:libsmartcols1-2.25-10.1 SUSE Linux Enterprise Server 12:libuuid1-2.25-10.1 SUSE Linux Enterprise Server 12:libuuid1-32bit-2.25-10.1 SUSE Linux Enterprise Server 12:python-libmount-2.25-10.3 SUSE Linux Enterprise Server 12:util-linux-2.25-10.1 SUSE Linux Enterprise Server 12:util-linux-lang-2.25-10.1 SUSE Linux Enterprise Server 12:util-linux-systemd-2.25-10.1 SUSE Linux Enterprise Server 12:uuidd-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libblkid1-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libblkid1-32bit-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libmount1-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libmount1-32bit-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libsmartcols1-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libuuid1-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:libuuid1-32bit-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:python-libmount-2.25-10.3 SUSE Linux Enterprise Server for SAP Applications 12:util-linux-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:util-linux-lang-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:util-linux-systemd-2.25-10.1 SUSE Linux Enterprise Server for SAP Applications 12:uuidd-2.25-10.1 SUSE Linux Enterprise Software Development Kit 12:libblkid-devel-2.25-10.1 SUSE Linux Enterprise Software Development Kit 12:libmount-devel-2.25-10.1 SUSE Linux Enterprise Software Development Kit 12:libsmartcols-devel-2.25-10.1 SUSE Linux Enterprise Software Development Kit 12:libuuid-devel-2.25-10.1 SUSE Linux Enterprise Workstation Extension 12:libuuid-devel-2.25-10.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150270-1/ https://www.suse.com/security/cve/CVE-2014-9114.html CVE-2014-9114 https://bugzilla.suse.com/907434 SUSE Bug 907434 https://bugzilla.suse.com/908742 SUSE Bug 908742