SUSE: 2019:0390-1 important: util-linux
Summary
This update for util-linux fixes the following issues: This non-security issue was fixed: - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user (bsc#1084300). These non-security issues were fixed: - Fixed crash loop in lscpu (bsc#1072947). - Fixed possible segfault of umount -a - Fixed mount -a on NFS bind mounts (bsc#1080740). - Fixed lsblk on NVMe (bsc#1078662). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2019-390=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2019-390=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2019-390=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2019-390=1 - SUSE Enterprise Storage 4: zypper in -t patch SUSE-Storage-4-2019-390=1 - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-390=1 Package List: - SUSE OpenStack Cloud 7 (s390x x86_64): libblkid1-2.28-44.18.18 libblkid1-32bit-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libblkid1-debuginfo-32bit-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-32bit-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libmount1-debuginfo-32bit-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-32bit-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 libuuid1-debuginfo-32bit-2.28-44.18.18 python-libmount-2.28-44.18.38 python-libmount-debuginfo-2.28-44.18.38 python-libmount-debugsource-2.28-44.18.38 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25 uuidd-2.28-44.18.25 uuidd-debuginfo-2.28-44.18.25 - SUSE OpenStack Cloud 7 (noarch): util-linux-lang-2.28-44.18.18 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libblkid1-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 python-libmount-2.28-44.18.38 python-libmount-debuginfo-2.28-44.18.38 python-libmount-debugsource-2.28-44.18.38 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25 uuidd-2.28-44.18.25 uuidd-debuginfo-2.28-44.18.25 - SUSE Linux Enterprise Server for SAP 12-SP2 (x86_64): libblkid1-32bit-2.28-44.18.18 libblkid1-debuginfo-32bit-2.28-44.18.18 libmount1-32bit-2.28-44.18.18 libmount1-debuginfo-32bit-2.28-44.18.18 libuuid1-32bit-2.28-44.18.18 libuuid1-debuginfo-32bit-2.28-44.18.18 - SUSE Linux Enterprise Server for SAP 12-SP2 (noarch): util-linux-lang-2.28-44.18.18 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libblkid1-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 python-libmount-2.28-44.18.38 python-libmount-debuginfo-2.28-44.18.38 python-libmount-debugsource-2.28-44.18.38 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25 uuidd-2.28-44.18.25 uuidd-debuginfo-2.28-44.18.25 - SUSE Linux Enterprise Server 12-SP2-LTSS (s390x x86_64): libblkid1-32bit-2.28-44.18.18 libblkid1-debuginfo-32bit-2.28-44.18.18 libmount1-32bit-2.28-44.18.18 libmount1-debuginfo-32bit-2.28-44.18.18 libuuid1-32bit-2.28-44.18.18 libuuid1-debuginfo-32bit-2.28-44.18.18 - SUSE Linux Enterprise Server 12-SP2-LTSS (noarch): util-linux-lang-2.28-44.18.18 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): util-linux-lang-2.28-44.18.18 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libblkid1-2.28-44.18.18 libblkid1-32bit-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libblkid1-debuginfo-32bit-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-32bit-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libmount1-debuginfo-32bit-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-32bit-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 libuuid1-debuginfo-32bit-2.28-44.18.18 python-libmount-2.28-44.18.38 python-libmount-debuginfo-2.28-44.18.38 python-libmount-debugsource-2.28-44.18.38 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25 uuidd-2.28-44.18.25 uuidd-debuginfo-2.28-44.18.25 - SUSE Enterprise Storage 4 (x86_64): libblkid1-2.28-44.18.18 libblkid1-32bit-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libblkid1-debuginfo-32bit-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-32bit-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libmount1-debuginfo-32bit-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-32bit-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 libuuid1-debuginfo-32bit-2.28-44.18.18 python-libmount-2.28-44.18.38 python-libmount-debuginfo-2.28-44.18.38 python-libmount-debugsource-2.28-44.18.38 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25 uuidd-2.28-44.18.25 uuidd-debuginfo-2.28-44.18.25 - SUSE Enterprise Storage 4 (noarch): util-linux-lang-2.28-44.18.18 - OpenStack Cloud Magnum Orchestration 7 (x86_64): libblkid1-2.28-44.18.18 libblkid1-debuginfo-2.28-44.18.18 libfdisk1-2.28-44.18.18 libfdisk1-debuginfo-2.28-44.18.18 libmount1-2.28-44.18.18 libmount1-debuginfo-2.28-44.18.18 libsmartcols1-2.28-44.18.18 libsmartcols1-debuginfo-2.28-44.18.18 libuuid1-2.28-44.18.18 libuuid1-debuginfo-2.28-44.18.18 util-linux-2.28-44.18.18 util-linux-debuginfo-2.28-44.18.18 util-linux-debugsource-2.28-44.18.18 util-linux-systemd-2.28-44.18.25 util-linux-systemd-debuginfo-2.28-44.18.25 util-linux-systemd-debugsource-2.28-44.18.25
References
#1072947 #1078662 #1080740 #1084300
Cross- CVE-2018-7738
Affected Products:
SUSE OpenStack Cloud 7
SUSE Linux Enterprise Server for SAP 12-SP2
SUSE Linux Enterprise Server 12-SP2-LTSS
SUSE Linux Enterprise Server 12-SP2-BCL
SUSE Enterprise Storage 4
OpenStack Cloud Magnum Orchestration 7
https://www.suse.com/security/cve/CVE-2018-7738.html
https://bugzilla.suse.com/1072947
https://bugzilla.suse.com/1078662
https://bugzilla.suse.com/1080740
https://bugzilla.suse.com/1084300