Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

openSUSE Leap 15.3: 2021:3474-1 Moderate: Util-Linux Buffer Overflow

opensuse
Calendar Grey October 20, 2021
Dist Opensuse Esm H88
Fixing a buffer overflow in util-linux, this recent openSUSE upgrade significantly boosts system protection.
An update that solves one vulnerability and has one errata is now available

Description

This update for util-linux fixes the following issues:

- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer

overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921)

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2021-3474=1

Package List

- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

libblkid-devel-2.36.2-4.5.1

libblkid-devel-static-2.36.2-4.5.1

libblkid1-2.36.2-4.5.1

libblkid1-debuginfo-2.36.2-4.5.1

libfdisk-devel-2.36.2-4.5.1

libfdisk-devel-static-2.36.2-4.5.1

libfdisk1-2.36.2-4.5.1

libfdisk1-debuginfo-2.36.2-4.5.1

libmount-devel-2.36.2-4.5.1

libmount-devel-static-2.36.2-4.5.1

libmount1-2.36.2-4.5.1

libmount1-debuginfo-2.36.2-4.5.1

libsmartcols-devel-2.36.2-4.5.1

libsmartcols-devel-static-2.36.2-4.5.1

libsmartcols1-2.36.2-4.5.1

libsmartcols1-debuginfo-2.36.2-4.5.1

libuuid-devel-2.36.2-4.5.1

libuuid-devel-static-2.36.2-4.5.1

libuuid1-2.36.2-4.5.1

libuuid1-debuginfo-2.36.2-4.5.1

python3-libmount-2.36.2-4.5.1

python3-libmount-debuginfo-2.36.2-4.5.1

python3-libmount-debugsource-2.36.2-4.5.1

util-linux-2.36.2-4.5.1

util-linux-debuginfo-2.36.2-4.5.1

util-linux-debugsource-2.36.2-4.5.1

util-linux-systemd-2.36.2-4.5.1

util-linux-systemd-debuginfo-2.36.2-4.5.1

util-linux-systemd-debugsource-2.36.2-4.5.1

uuidd-2.36.2-4.5.1

uuidd-debuginfo-2.36.2-4.5.1...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2021-37600.html

https://bugzilla.suse.com/1178236

https://bugzilla.suse.com/1188921

Announcement ID: openSUSE-SU-2021:3474-1
Rating: moderate
Affected Products: openSUSE Leap 15.3 ble.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here