util-linux: command injection

There is a command injection inside blkid. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the UUID, LABEL etc it finds on certain devices. However, it does not strip " character, so it can be confused to build variable names containing embedded shell metas, whic...

SUSE-SU-2015:0270-1 Security update for util-linux

util-linux was updated to fix one security issue. This security issue was fixed: - CVE-2014-9114: Using crafted block devices e.g. USB sticks it was possibly to inject code via libblkid. libblkid was fixed to care about unsafe chars and possible buffer overflow in cache bnc907434 This non-securit...

openSUSE Security Update : util-linux (openSUSE-SU-2015:0066-1)

util-linux was updated to fix a security issue, where local attackers might be able to execute code as root with a prepared USB stick CVE-2014-9114 bsc907434. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Fedora Update for util-linux FEDORA-2014-15908

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: util-linux-2.25.2-2.fc21

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

Fedora 21 : util-linux-2.25.2-2.fc21 (2014-15908)

Security fix for CVE-2014-9114 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Updated util-linux packages fix CVE-2014-9114

Updated util-linux packages fix security vulnerability: Sebastian Krahmer reported a command injection flaw in blkid. This could possibly result in command execution with root privileges CVE-2014-9114. The util-linux package has been updated to version 2.24.2 and patched to fix this issue and oth...

MGASA-2014-0517 Updated util-linux packages fix CVE-2014-9114

Updated util-linux packages fix security vulnerability: Sebastian Krahmer reported a command injection flaw in blkid. This could possibly result in command execution with root privileges CVE-2014-9114. The util-linux package has been updated to version 2.24.2 and patched to fix this issue and oth...

Fedora Update for util-linux FEDORA-2014-16016

Check the version of util-linux SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868549";...

[SECURITY] Fedora 20 Update: util-linux-2.24.2-2.fc20

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

Fedora 20 : util-linux-2.24.2-2.fc20 (2014-16016)

Security fix for CVE-2014-9114 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

PT-2017-6326

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.26rc-1 Description The issue allows local users to execute arbitrary code. Recommendations For versions prior to 2.26rc-1, update to version 2.26rc-1 or later to resolve the issue...

Вышла операционная система OpenWrt 14.07

Встроенная операционная система OpenWrt обновилась до версии 14.07. Эту ОС часто устанавливают на маршрутизаторах как замену проприетарным прошивкам. Основные компоненты OpenWrt включают в себя ядро Linux, util-linux, uClibc и BusyBox. Размер всех компонентов минимизирован, чтобы работать на...

SUSE-SU-2015:0580-1 Recommended update for util-linux

This update for util-linux provides the following fixes: Make blkid8 issue only one READ on faulty devices. bnc859062 Added option -r to fsck8 to dump a few resource statistics after each successful run. bnc761815 Prevent excessive clock drift calculations. bnc871698 Check /etc/adjtime drift...

GLSA-201405-15 : util-linux: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-15 util-linux: Multiple vulnerabilities Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details. Impact : A local attacker may be able to cause a Denial of...

util-linux: Multiple vulnerabilities

Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details. Impact A local attacker may be ab...

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

DEBIAN-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

UBUNTU-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...