Security update for util-linux SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3268-1 Final 1 1 2023-08-10T14:15:50Z current 2023-08-10T14:15:50Z 2023-08-10T14:15:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux This update for util-linux fixes the following issues: - CVE-2018-7738: Fixed shell code injection in umount bash-completions. (bsc#1213865, bsc#1084300) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles12sp5:latest-2023-3268,Image SLES12-SP5-Azure-BYOS-2023-3268,Image SLES12-SP5-Azure-SAP-BYOS-2023-3268,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2023-3268,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2023-3268,SUSE-2023-3268,SUSE-SLE-SDK-12-SP5-2023-3268,SUSE-SLE-SERVER-12-SP5-2023-3268,SUSE-SLE-WE-12-SP5-2023-3268 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233268-1/ Link for SUSE-SU-2023:3268-1 https://lists.suse.com/pipermail/sle-security-updates/2023-August/015862.html E-Mail link for SUSE-SU-2023:3268-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1084300 SUSE Bug 1084300 https://bugzilla.suse.com/1194038 SUSE Bug 1194038 https://bugzilla.suse.com/1213865 SUSE Bug 1213865 https://www.suse.com/security/cve/CVE-2018-7738/ SUSE CVE CVE-2018-7738 page Container suse/sles12sp5:latest Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 libblkid1-2.33.2-4.33.1 libfdisk1-2.33.2-4.33.1 libmount1-2.33.2-4.33.1 libsmartcols1-2.33.2-4.33.1 libuuid1-2.33.2-4.33.1 util-linux-2.33.2-4.33.1 util-linux-systemd-2.33.2-4.33.1 uuidd-2.33.2-4.33.1 libblkid-devel-2.33.2-4.33.1 libblkid-devel-32bit-2.33.2-4.33.1 libblkid-devel-64bit-2.33.2-4.33.1 libblkid-devel-static-2.33.2-4.33.1 libblkid1-32bit-2.33.2-4.33.1 libblkid1-64bit-2.33.2-4.33.1 libfdisk-devel-2.33.2-4.33.1 libfdisk-devel-static-2.33.2-4.33.1 libmount-devel-2.33.2-4.33.1 libmount-devel-32bit-2.33.2-4.33.1 libmount-devel-64bit-2.33.2-4.33.1 libmount-devel-static-2.33.2-4.33.1 libmount1-32bit-2.33.2-4.33.1 libmount1-64bit-2.33.2-4.33.1 libsmartcols-devel-2.33.2-4.33.1 libsmartcols-devel-static-2.33.2-4.33.1 libuuid-devel-2.33.2-4.33.1 libuuid-devel-32bit-2.33.2-4.33.1 libuuid-devel-64bit-2.33.2-4.33.1 libuuid-devel-static-2.33.2-4.33.1 libuuid1-32bit-2.33.2-4.33.1 libuuid1-64bit-2.33.2-4.33.1 python-libmount-2.33.2-4.33.1 util-linux-lang-2.33.2-4.33.1 libblkid1-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest libfdisk1-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest libmount1-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest libsmartcols1-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest libuuid1-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest util-linux-2.33.2-4.33.1 as a component of Container suse/sles12sp5:latest libblkid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS libfdisk1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS libmount1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS libsmartcols1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS libuuid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS util-linux-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS util-linux-systemd-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-BYOS libblkid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libfdisk1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libmount1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libsmartcols1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libuuid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS util-linux-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS util-linux-systemd-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS uuidd-2.33.2-4.33.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libblkid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libfdisk1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libmount1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libsmartcols1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libuuid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production util-linux-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production util-linux-systemd-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production uuidd-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libblkid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libfdisk1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libmount1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libsmartcols1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libuuid1-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production util-linux-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production util-linux-systemd-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production uuidd-2.33.2-4.33.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libblkid1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libblkid1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libfdisk1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libmount1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libmount1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libsmartcols1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libuuid1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libuuid1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-libmount-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 util-linux-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 util-linux-lang-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 util-linux-systemd-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 uuidd-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libblkid1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libblkid1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libfdisk1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmount1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmount1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libsmartcols1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libuuid1-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libuuid1-32bit-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-libmount-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 util-linux-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 util-linux-lang-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 util-linux-systemd-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 uuidd-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libblkid-devel-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libmount-devel-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libsmartcols-devel-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libuuid-devel-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libuuid-devel-2.33.2-4.33.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion. CVE-2018-7738 Container suse/sles12sp5:latest:libblkid1-2.33.2-4.33.1 Container suse/sles12sp5:latest:libfdisk1-2.33.2-4.33.1 Container suse/sles12sp5:latest:libmount1-2.33.2-4.33.1 Container suse/sles12sp5:latest:libsmartcols1-2.33.2-4.33.1 Container suse/sles12sp5:latest:libuuid1-2.33.2-4.33.1 Container suse/sles12sp5:latest:util-linux-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:libblkid1-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:libfdisk1-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:libmount1-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:libsmartcols1-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:libuuid1-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:util-linux-2.33.2-4.33.1 Image SLES12-SP5-Azure-BYOS:util-linux-systemd-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:libblkid1-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:libfdisk1-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:libmount1-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:libsmartcols1-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:libuuid1-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:util-linux-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:util-linux-systemd-2.33.2-4.33.1 Image SLES12-SP5-Azure-SAP-BYOS:uuidd-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libblkid1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libfdisk1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libmount1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libsmartcols1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libuuid1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:util-linux-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:util-linux-systemd-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:uuidd-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libblkid1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libfdisk1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libmount1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libsmartcols1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libuuid1-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:util-linux-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:util-linux-systemd-2.33.2-4.33.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:uuidd-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libblkid1-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libblkid1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libfdisk1-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libmount1-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libmount1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libsmartcols1-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libuuid1-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:libuuid1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:python-libmount-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:util-linux-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:util-linux-lang-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:util-linux-systemd-2.33.2-4.33.1 SUSE Linux Enterprise Server 12 SP5:uuidd-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libblkid1-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libblkid1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libfdisk1-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmount1-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmount1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libsmartcols1-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libuuid1-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libuuid1-32bit-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libmount-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:util-linux-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:util-linux-lang-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:util-linux-systemd-2.33.2-4.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:uuidd-2.33.2-4.33.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libblkid-devel-2.33.2-4.33.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libmount-devel-2.33.2-4.33.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libsmartcols-devel-2.33.2-4.33.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libuuid-devel-2.33.2-4.33.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libuuid-devel-2.33.2-4.33.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233268-1/ https://www.suse.com/security/cve/CVE-2018-7738.html CVE-2018-7738 https://bugzilla.suse.com/1080740 SUSE Bug 1080740 https://bugzilla.suse.com/1084300 SUSE Bug 1084300 https://bugzilla.suse.com/1213865 SUSE Bug 1213865