This update for util-linux fixes the following issues:
* CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch SUSE-2024-1172=1 openSUSE-SLE-15.5-2024-1172=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2024-1172=1
* Basesystem Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1172=1
* Server Applications Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1172=1
* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
* libmount-devel-static-2.37.4-150500.9.6.1
* libblkid1-debuginfo-2.37.4-150500.9.6.1
* libfdisk1-2.37.4-150500.9.6.1
* libfdisk-devel-static-2.37.4-150500.9.6.1
* libuuid-devel-static-2.37.4-150500.9.6.1
* libsmartcols1-debuginfo-2.37.4-150500.9.6.1
* util-linux-systemd-debuginfo-2.37.4-150500.9.6.1
* uuidd-2.37.4-150500.9.6.1
* libuuid1-2.37.4-150500.9.6.1
* python3-libmount-2.37.4-150500.9.6.1
* python3-libmount-debugsource-2.37.4-150500.9.6.1
* libuuid-devel-2.37.4-150500.9.6.1
* util-linux-2.37.4-150500.9.6.1
* util-linux-debuginfo-2.37.4-150500.9.6.1
* libfdisk1-debuginfo-2.37.4-150500.9.6.1
* libuuid1-debuginfo-2.37.4-150500.9.6.1
* uuidd-debuginfo-2.37.4-150500.9.6.1
* libmount1-debuginfo-2.37.4-150500.9.6.1
* util-linux-debugsource-2.37.4-150500.9.6.1
* util-linux-systemd-2.37.4-150500.9.6.1
* util-linux-systemd-debugsource-2.37.4-150500.9.6.1
* libsmartcols1-2.37.4-150500.9.6.1
* libsmartcols-devel-2.37.4-150500.9.6.1
*...
Read the Full Advisory* bsc#1207987
* bsc#1221831
## References:
* https://www.suse.com/security/cve/CVE-2024-28085.html
* https://bugzilla.suse.com/show_bug.cgi?id=1207987
* https://bugzilla.suse.com/show_bug.cgi?id=1221831
Get the latest Linux and open source security news straight to your inbox.