Lucene search

K
suseSuseSUSE-SU-2017:0553-1
HistoryFeb 23, 2017 - 12:09 p.m.

Security update for util-linux (important)

2017-02-2312:09:03
lists.opensuse.org
24

0.002 Low

EPSS

Percentile

52.9%

This update for util-linux fixes a number of bugs and two security issues.

The following security bugs were fixed:

  • CVE-2016-5011: Infinite loop DoS in libblkid while parsing DOS partition
    (bsc#988361)
  • CVE-2017-2616: In su with PAM support it was possible for local users to
    send SIGKILL to selected other processes with root privileges
    (bsc#1023041).

The following non-security bugs were fixed:

  • bsc#1008965: Ensure that the option "users,exec,dev,suid" work as
    expected on NFS mounts
  • bsc#1012504: Fix regressions in safe loop re-use patch set for libmount
  • bsc#1012632: Disable ro checks for mtab
  • bsc#1020077: fstrim: De-duplicate btrfs sub-volumes for "fstrim -a" and
    bind mounts
  • bsc#947494: mount -a would fail to recognize btrfs already mounted,
    address loop re-use in libmount
  • bsc#966891: Conflict in meaning of losetup -L. This switch in SLE12 SP1
    and SP2 continues to carry the meaning of --logical-blocksize instead of
    upstream --nooverlap
  • bsc#978993: cfdisk would mangle some text output
  • bsc#982331: libmount: ignore redundant slashes
  • bsc#983164: mount uid= and gid= would reject valid non UID/GID values
  • bsc#987176: When mounting a subfolder of a CIFS share, mount -a would
    show the mount as busy
  • bsc#1019332: lscpu: Implement WSL detection and work around crash