Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE 12-SP2-BCL: SUSE-SU-2022:1103-1 Important Buffer Overflow

suse
Calendar Grey April 4, 2022
Dist Suse Esm H88
Important SUSE patch for util-linux resolves a buffer overflow along with numerous corrections to bolster system security.
An update that solves one vulnerability and has 23 fixes is now available

Summary

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. (bsc#1194642) - Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642) - Warn if uuidd lock state is not usable. (bsc#1194642) - Fix "su -s" bash completion. (bsc#1172427) - CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921) - Load /etc/default/su (bsc#1116347). - Prevent outdated pam files (bsc#1082293, bsc#1081947#c68). - Do not trim read-only volumes (bsc#1106214). - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - agetty: Reload issue only if it is really needed (bsc#1085196)

Topics%20covered

Topics Covered

security advisory update buffer overflow security fix important util-linux SUSE Linux Enterprise

References

#1038841 #1081947 #1082293 #1084671 #1085196

#1106214 #1116347 #1122417 #1125886 #1135534

#1135708 #1151708 #1168235 #1168389 #1169006

#1172427 #1174942 #1175514 #1175623 #1178236

#1178554 #1178825 #1188921 #1194642

Cross- CVE-2021-37600

CVSS scores:

CVE-2021-37600 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2021-37600 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP2-BCL

https://www.suse.com/security/cve/CVE-2021-37600.html

https://bugzilla.suse.com/1038841

https://bugzilla.suse.com/1081947

https://bugzilla.suse.com/1082293

https://bugzilla.suse.com/1084671

https://bugzilla.suse.com/1085196

https://bugzilla.suse.com/1106214

https://bugzilla.suse.com/1116347

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1103-1
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow security fix important util-linux SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here