Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE Linux Enterprise: 2022:1105-1 Important: Buffer Overflow Fix

suse
Calendar Grey April 4, 2022
Dist Suse Esm H88
SUSE Security Update implements vital corrections for util-linux, addressing a critical vulnerability alongside 21 other enhancements.
An update that solves one vulnerability and has 21 fixes is now available

Summary

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. (bsc#1194642) - Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642) - Warn if uuidd lock state is not usable. (bsc#1194642) - Fix "su -s" bash completion. (bsc#1172427) - CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921) - Prevent outdated pam files (bsc#1082293, bsc#1081947#c68). - Do not trim read-only volumes (bsc#1106214). - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - raw.service: Add `RemainAfterExit=yes` (bsc#1135534). - agetty: Reload issue only if it is really needed (bsc#1085196)

Topics%20covered

Topics Covered

security advisory buffer overflow vulnerability patch important util-linux SUSE

References

#1081947 #1082293 #1084671 #1085196 #1106214

#1122417 #1125886 #1135534 #1135708 #1151708

#1168235 #1168389 #1169006 #1172427 #1174942

#1175514 #1175623 #1178236 #1178554 #1178825

#1188921 #1194642

Cross- CVE-2021-37600

CVSS scores:

CVE-2021-37600 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2021-37600 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

https://www.suse.com/security/cve/CVE-2021-37600.html

https://bugzilla.suse.com/1081947

https://bugzilla.suse.com/1082293

https://bugzilla.suse.com/1084671

https://bugzilla.suse.com/1085196

https://bugzilla.suse.com/1106214

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1105-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow vulnerability patch important util-linux SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here