This update for util-linux fixes the following issues: CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831). # Security update for util-linux Announcement ID: SUSE-SU-2024:1170-1 Rating: important References: * bsc#1194038 * bsc#1207987 * bsc#1221831 Cross-References: * CVE-2024-28085 CVSS scores: * CVE-2024-28085 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-1170=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1170=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1170=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1170=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-1170=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1170=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1170=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1170=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * libblkid-devel-static-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-static-2.36.2-150300.4.41.1 * libblkid-devel-2.36.2-150300.4.41.1 * libmount-devel-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * python3-libmount-debugsource-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * libsmartcols-devel-2.36.2-150300.4.41.1 * python3-libmount-2.36.2-150300.4.41.1 * uuidd-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-static-2.36.2-150300.4.41.1 * libsmartcols-devel-static-2.36.2-150300.4.41.1 * uuidd-2.36.2-150300.4.41.1 * python3-libmount-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * libmount-devel-static-2.36.2-150300.4.41.1 * openSUSE Leap 15.3 (x86_64) * libuuid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-32bit-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-32bit-2.36.2-150300.4.41.1 * libuuid-devel-32bit-2.36.2-150300.4.41.1 * libblkid-devel-32bit-2.36.2-150300.4.41.1 * libsmartcols-devel-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-debuginfo-2.36.2-150300.4.41.1 *libmount1-32bit-debuginfo-2.36.2-150300.4.41.1 * libuuid1-32bit-2.36.2-150300.4.41.1 * libmount1-32bit-2.36.2-150300.4.41.1 * libmount-devel-32bit-2.36.2-150300.4.41.1 * libfdisk1-32bit-2.36.2-150300.4.41.1 * libfdisk1-32bit-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-2.36.2-150300.4.41.1 * openSUSE Leap 15.3 (noarch) * util-linux-lang-2.36.2-150300.4.41.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libmount-devel-64bit-2.36.2-150300.4.41.1 * libsmartcols1-64bit-debuginfo-2.36.2-150300.4.41.1 * libmount1-64bit-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-64bit-2.36.2-150300.4.41.1 * libuuid1-64bit-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-64bit-2.36.2-150300.4.41.1 * libuuid1-64bit-2.36.2-150300.4.41.1 * libfdisk1-64bit-2.36.2-150300.4.41.1 * libblkid-devel-64bit-2.36.2-150300.4.41.1 * libuuid-devel-64bit-2.36.2-150300.4.41.1 * libblkid1-64bit-2.36.2-150300.4.41.1 * libmount1-64bit-2.36.2-150300.4.41.1 * libsmartcols-devel-64bit-2.36.2-150300.4.41.1 * libblkid1-64bit-debuginfo-2.36.2-150300.4.41.1 * libfdisk1-64bit-debuginfo-2.36.2-150300.4.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libblkid-devel-static-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-static-2.36.2-150300.4.41.1 * libblkid-devel-2.36.2-150300.4.41.1 * libmount-devel-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 *libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * libsmartcols-devel-2.36.2-150300.4.41.1 * uuidd-debuginfo-2.36.2-150300.4.41.1 * uuidd-2.36.2-150300.4.41.1 * libuuid-devel-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * util-linux-lang-2.36.2-150300.4.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libuuid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libblkid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libuuid1-32bit-2.36.2-150300.4.41.1 * libmount1-32bit-debuginfo-2.36.2-150300.4.41.1 * libmount1-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libblkid-devel-static-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-static-2.36.2-150300.4.41.1 * libblkid-devel-2.36.2-150300.4.41.1 * libmount-devel-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * libsmartcols-devel-2.36.2-150300.4.41.1 * uuidd-debuginfo-2.36.2-150300.4.41.1 * uuidd-2.36.2-150300.4.41.1 * libuuid-devel-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * SUSE LinuxEnterprise Server 15 SP3 LTSS 15-SP3 (noarch) * util-linux-lang-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libuuid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libblkid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libuuid1-32bit-2.36.2-150300.4.41.1 * libmount1-32bit-debuginfo-2.36.2-150300.4.41.1 * libmount1-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libblkid-devel-static-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-static-2.36.2-150300.4.41.1 * libblkid-devel-2.36.2-150300.4.41.1 * libmount-devel-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * libsmartcols-devel-2.36.2-150300.4.41.1 * uuidd-debuginfo-2.36.2-150300.4.41.1 * uuidd-2.36.2-150300.4.41.1 * libuuid-devel-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * util-linux-lang-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libuuid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libblkid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libuuid1-32bit-2.36.2-150300.4.41.1 * libmount1-32bit-debuginfo-2.36.2-150300.4.41.1 *libmount1-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-2.36.2-150300.4.41.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libblkid-devel-static-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libuuid-devel-static-2.36.2-150300.4.41.1 * libblkid-devel-2.36.2-150300.4.41.1 * libmount-devel-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * libfdisk-devel-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * libsmartcols-devel-2.36.2-150300.4.41.1 * uuidd-debuginfo-2.36.2-150300.4.41.1 * uuidd-2.36.2-150300.4.41.1 * libuuid-devel-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * SUSE Enterprise Storage 7.1 (noarch) * util-linux-lang-2.36.2-150300.4.41.1 * SUSE Enterprise Storage 7.1 (x86_64) * libuuid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libblkid1-32bit-debuginfo-2.36.2-150300.4.41.1 * libuuid1-32bit-2.36.2-150300.4.41.1 * libmount1-32bit-debuginfo-2.36.2-150300.4.41.1 * libmount1-32bit-2.36.2-150300.4.41.1 * libblkid1-32bit-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 *util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libuuid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debugsource-2.36.2-150300.4.41.1 * util-linux-debuginfo-2.36.2-150300.4.41.1 * libfdisk1-debuginfo-2.36.2-150300.4.41.1 * util-linux-systemd-debuginfo-2.36.2-150300.4.41.1 * libblkid1-debuginfo-2.36.2-150300.4.41.1 * util-linux-debugsource-2.36.2-150300.4.41.1 * libsmartcols1-2.36.2-150300.4.41.1 * libsmartcols1-debuginfo-2.36.2-150300.4.41.1 * libuuid1-2.36.2-150300.4.41.1 * libfdisk1-2.36.2-150300.4.41.1 * libmount1-debuginfo-2.36.2-150300.4.41.1 * libmount1-2.36.2-150300.4.41.1 * util-linux-systemd-2.36.2-150300.4.41.1 * util-linux-2.36.2-150300.4.41.1 * libblkid1-2.36.2-150300.4.41.1 ## References: *https://www.suse.com/security/cve/CVE-2024-28085.html * https://bugzilla.suse.com/show_bug.cgi?id=1194038 * https://bugzilla.suse.com/show_bug.cgi?id=1207987 * https://bugzilla.suse.com/show_bug.cgi?id=1221831 . Addressing critical vulnerabilities within util-linux, focusing on neutralizing escape sequences in the wall command for openSUSE.. openSUSE Update, Util-linux Security, Escape Sequences Issue. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for gzip ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1272-1 Rating: important References: #1198062 Cross-References: CVE-2022-1271 CVSS scores: CVE-2022-1271 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gzip fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1272=1 Package List: - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): gzip-1.10-4.11.3 gzip-debuginfo-1.10-4.11.3 gzip-debugsource-1.10-4.11.3 References: https://www.suse.com/security/cve/CVE-2022-1271.html https://bugzilla.suse.com/1198062 . SUSE Security Advisory for tar: Critical update released for CVE-2022-1347. Prompt remediation recommended.. SUSE Security Update, gzip, patch instructions, CVE-2022-1271. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0794-1 Rating: moderate References: #1172225 Cross-References: CVE-2019-20807 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for vim fixes the following issues: - CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces (bsc#1172225). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-794=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gvim-8.0.1568-lp151.5.6.1 gvim-debuginfo-8.0.1568-lp151.5.6.1 vim-8.0.1568-lp151.5.6.1 vim-debuginfo-8.0.1568-lp151.5.6.1 vim-debugsource-8.0.1568-lp151.5.6.1 - openSUSE Leap 15.1 (noarch): vim-data-8.0.1568-lp151.5.6.1 vim-data-common-8.0.1568-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-20807.html https://bugzilla.suse.com/1172225 -- . OpenSUSE has released a security patch for Vim that targets a moderate vulnerability recognized as CVE-2019-20807.. openSUSE, Vim Update, Security Patch. . LinuxSecurity.com Team
Security fix for CVE-2019-14869. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-6cdb10aa59 2019-11-18 22:47:05.646421 --------------------------------------------------------------------------------Name : ghostscript Product : Fedora 31 Version : 9.27 Release : 2.fc31 URL : https://ghostscript.com/ Summary : Interpreter for PostScript language & PDF Description : This package provides useful conversion utilities based on Ghostscript software, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript (PS) and Portable Document Format (PDF) page description languages. Its primary purpose includes displaying (rasterization & rendering) and printing of document pages, as well as conversions between different document formats. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2019-14869 --------------------------------------------------------------------------------ChangeLog: * Thu Nov 14 2019 Zdenek Dohnal - 9.27-2 - 1772486 - ghostscript: -dSAFER escape in .charkeys (701841) --------------------------------------------------------------------------------References: [ 1 ] Bug #1768911 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (701841) https://bugzilla.redhat.com/show_bug.cgi?id=1768911 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-6cdb10aa59' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.