Security update for util-linux SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2764-1 Final 1 1 2016-11-09T17:11:33Z current 2016-11-09T17:11:33Z 2016-11-09T17:11:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux This update for util-linux fixes a number of bugs and one minor security issue. The following minor vulnerability was fixed: - CVE-2016-5011: Infinite loop DoS in libblkid while parsing DOS partition (bsc#988361) The following bugs were fixed: - bsc#987176: When mounting a subfolder of a CIFS share, mount -a would show the mount as busy - bsc#947494: mount -a would fail to recognize btrfs already mounted, address loop re-use in libmount - bsc#966891: Conflict in meaning of losetup -L. This switch in SLE12 SP1 and SP2 continues to carry the meaning of --logical-blocksize instead of upstream --nooverlap - bsc#994399: Package would trigger conflicts with sysvinit-tools - bsc#983164: mount uid= and gid= would reject valid non UID/GID values - bsc#978993: cfdisk would mangle some text output - bsc#982331: libmount: ignore redundant slashes The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP1-2016-1630,SUSE-SLE-SDK-12-SP1-2016-1630,SUSE-SLE-SERVER-12-SP1-2016-1630,SUSE-SLE-WE-12-SP1-2016-1630 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162764-1/ Link for SUSE-SU-2016:2764-1 https://lists.suse.com/pipermail/sle-security-updates/2016-November/002396.html E-Mail link for SUSE-SU-2016:2764-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/947494 SUSE Bug 947494 https://bugzilla.suse.com/966891 SUSE Bug 966891 https://bugzilla.suse.com/978993 SUSE Bug 978993 https://bugzilla.suse.com/982331 SUSE Bug 982331 https://bugzilla.suse.com/983164 SUSE Bug 983164 https://bugzilla.suse.com/987176 SUSE Bug 987176 https://bugzilla.suse.com/988361 SUSE Bug 988361 https://bugzilla.suse.com/994399 SUSE Bug 994399 https://www.suse.com/security/cve/CVE-2016-5011/ SUSE CVE CVE-2016-5011 page SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 libblkid1-2.25-37.1 libblkid1-32bit-2.25-37.1 libmount1-2.25-37.1 libmount1-32bit-2.25-37.1 libsmartcols1-2.25-37.1 libuuid-devel-2.25-37.1 libuuid1-2.25-37.1 libuuid1-32bit-2.25-37.1 python-libmount-2.25-37.1 util-linux-2.25-37.1 util-linux-lang-2.25-37.1 util-linux-systemd-2.25-37.1 uuidd-2.25-37.1 libblkid-devel-2.25-37.1 libmount-devel-2.25-37.1 libsmartcols-devel-2.25-37.1 libblkid1-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libblkid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libmount1-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libmount1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libsmartcols1-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libuuid-devel-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libuuid1-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libuuid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 python-libmount-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 util-linux-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 util-linux-lang-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 util-linux-systemd-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 uuidd-2.25-37.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libblkid1-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libblkid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libmount1-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libmount1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libsmartcols1-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libuuid1-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libuuid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 python-libmount-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 util-linux-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 util-linux-lang-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 util-linux-systemd-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 uuidd-2.25-37.1 as a component of SUSE Linux Enterprise Server 12 SP1 libblkid1-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libblkid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libmount1-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libmount1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libsmartcols1-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libuuid1-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libuuid1-32bit-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 python-libmount-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 util-linux-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 util-linux-lang-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 util-linux-systemd-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 uuidd-2.25-37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libblkid-devel-2.25-37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libmount-devel-2.25-37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libsmartcols-devel-2.25-37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libuuid-devel-2.25-37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libuuid-devel-2.25-37.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset. CVE-2016-5011 SUSE Linux Enterprise Desktop 12 SP1:libblkid1-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libblkid1-32bit-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libmount1-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libmount1-32bit-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libsmartcols1-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libuuid-devel-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libuuid1-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:libuuid1-32bit-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:python-libmount-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:util-linux-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:util-linux-lang-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:util-linux-systemd-2.25-37.1 SUSE Linux Enterprise Desktop 12 SP1:uuidd-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libblkid1-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libblkid1-32bit-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libmount1-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libmount1-32bit-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libsmartcols1-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libuuid1-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:libuuid1-32bit-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:python-libmount-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:util-linux-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:util-linux-lang-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:util-linux-systemd-2.25-37.1 SUSE Linux Enterprise Server 12 SP1:uuidd-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libblkid1-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libblkid1-32bit-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmount1-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmount1-32bit-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libsmartcols1-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libuuid1-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libuuid1-32bit-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libmount-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:util-linux-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:util-linux-lang-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:util-linux-systemd-2.25-37.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:uuidd-2.25-37.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libblkid-devel-2.25-37.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libmount-devel-2.25-37.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libsmartcols-devel-2.25-37.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libuuid-devel-2.25-37.1 SUSE Linux Enterprise Workstation Extension 12 SP1:libuuid-devel-2.25-37.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162764-1/ https://www.suse.com/security/cve/CVE-2016-5011.html CVE-2016-5011 https://bugzilla.suse.com/988361 SUSE Bug 988361