Security update for util-linux SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:14693-1 Final 1 1 2021-04-14T17:08:56Z current 2021-04-14T17:08:56Z 2021-04-14T17:08:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux This update for util-linux fixes the following issues: - CVE-2015-5218: Prevent colcrt buffer overflow. (bsc#949754) These non-security issues were fixed: - Mount crashes when trying to mount `shmfs` while `SELinux` is active. (bsc#1040414) - Fix `lsblk -f` on `CCISS` and other devices with nodes in `/dev` subdirectory. (bsc#924994) - Fix `script(1)` hang caused by mis-interpreted EOF on big-endian platforms. (bsc#930236) - Do not segfault when TERM is not defined or wrong. (bsc#903440) - Update and fix mount XFS documentation. (bsc#925705) - Fix recognition of `/dev/dm-N` partitions names. (bsc#931607) - Follow SUSE Linux Enterprise 11 device mapper partition names configuration. (bsc#931607) - Fix recognition of device mapper partitions. (bsc#923904) - Fix `fsck -C {fd}` parsing. (bsc#923777, bsc#903738) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleposp3-util-linux-14693 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-202114693-1/ Link for SUSE-SU-2021:14693-1 https://lists.suse.com/pipermail/sle-security-updates/2021-April/008640.html E-Mail link for SUSE-SU-2021:14693-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1040414 SUSE Bug 1040414 https://bugzilla.suse.com/903440 SUSE Bug 903440 https://bugzilla.suse.com/903738 SUSE Bug 903738 https://bugzilla.suse.com/923777 SUSE Bug 923777 https://bugzilla.suse.com/923904 SUSE Bug 923904 https://bugzilla.suse.com/924994 SUSE Bug 924994 https://bugzilla.suse.com/925705 SUSE Bug 925705 https://bugzilla.suse.com/930236 SUSE Bug 930236 https://bugzilla.suse.com/931607 SUSE Bug 931607 https://bugzilla.suse.com/949754 SUSE Bug 949754 https://www.suse.com/security/cve/CVE-2015-5218/ SUSE CVE CVE-2015-5218 page SUSE Linux Enterprise Point of Sale 11 SP3 libblkid1-2.19.1-6.62.7.1 libuuid1-2.19.1-6.62.7.1 util-linux-2.19.1-6.62.7.1 util-linux-lang-2.19.1-6.62.7.1 uuid-runtime-2.19.1-6.62.7.1 libblkid1-2.19.1-6.62.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libuuid1-2.19.1-6.62.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 util-linux-2.19.1-6.62.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 util-linux-lang-2.19.1-6.62.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 uuid-runtime-2.19.1-6.62.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. CVE-2015-5218 SUSE Linux Enterprise Point of Sale 11 SP3:libblkid1-2.19.1-6.62.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:libuuid1-2.19.1-6.62.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:util-linux-2.19.1-6.62.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:util-linux-lang-2.19.1-6.62.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:uuid-runtime-2.19.1-6.62.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114693-1/ https://www.suse.com/security/cve/CVE-2015-5218.html CVE-2015-5218 https://bugzilla.suse.com/949754 SUSE Bug 949754