Security update for util-linux SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0589-1 Final 1 1 2017-03-02T10:49:41Z current 2017-03-02T10:49:41Z 2017-03-02T10:49:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for util-linux This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security issues were fixed: - lscpu: Implement WSL detection and work around crash (bsc#1019332) - fstrim: De-duplicate btrfs sub-volumes for 'fstrim -a' and bind mounts (bsc#1020077) - Fix regressions in safe loop re-use patch set for libmount (bsc#1012504) - Disable ro checks for mtab (bsc#1012632) - Ensure that the option 'users,exec,dev,suid' work as expected on NFS mounts (bsc#1008965) - Fix empty slave detection to prevent 100% CPU load in some cases (bsc#1020985) This update was imported from the SUSE:SLE-12-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00001.html E-Mail link for openSUSE-SU-2017:0589-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.2 libblkid-devel-2.28-10.1 libblkid-devel-32bit-2.28-10.1 libblkid-devel-static-2.28-10.1 libblkid1-2.28-10.1 libblkid1-32bit-2.28-10.1 libfdisk-devel-2.28-10.1 libfdisk-devel-static-2.28-10.1 libfdisk1-2.28-10.1 libmount-devel-2.28-10.1 libmount-devel-32bit-2.28-10.1 libmount-devel-static-2.28-10.1 libmount1-2.28-10.1 libmount1-32bit-2.28-10.1 libsmartcols-devel-2.28-10.1 libsmartcols-devel-static-2.28-10.1 libsmartcols1-2.28-10.1 libuuid-devel-2.28-10.1 libuuid-devel-32bit-2.28-10.1 libuuid-devel-static-2.28-10.1 libuuid1-2.28-10.1 libuuid1-32bit-2.28-10.1 python-libmount-2.28-10.2 util-linux-2.28-10.1 util-linux-lang-2.28-10.1 util-linux-systemd-2.28-10.1 uuidd-2.28-10.1 libblkid-devel-2.28-10.1 as a component of openSUSE Leap 42.2 libblkid-devel-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 libblkid-devel-static-2.28-10.1 as a component of openSUSE Leap 42.2 libblkid1-2.28-10.1 as a component of openSUSE Leap 42.2 libblkid1-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 libfdisk-devel-2.28-10.1 as a component of openSUSE Leap 42.2 libfdisk-devel-static-2.28-10.1 as a component of openSUSE Leap 42.2 libfdisk1-2.28-10.1 as a component of openSUSE Leap 42.2 libmount-devel-2.28-10.1 as a component of openSUSE Leap 42.2 libmount-devel-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 libmount-devel-static-2.28-10.1 as a component of openSUSE Leap 42.2 libmount1-2.28-10.1 as a component of openSUSE Leap 42.2 libmount1-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 libsmartcols-devel-2.28-10.1 as a component of openSUSE Leap 42.2 libsmartcols-devel-static-2.28-10.1 as a component of openSUSE Leap 42.2 libsmartcols1-2.28-10.1 as a component of openSUSE Leap 42.2 libuuid-devel-2.28-10.1 as a component of openSUSE Leap 42.2 libuuid-devel-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 libuuid-devel-static-2.28-10.1 as a component of openSUSE Leap 42.2 libuuid1-2.28-10.1 as a component of openSUSE Leap 42.2 libuuid1-32bit-2.28-10.1 as a component of openSUSE Leap 42.2 python-libmount-2.28-10.2 as a component of openSUSE Leap 42.2 util-linux-2.28-10.1 as a component of openSUSE Leap 42.2 util-linux-lang-2.28-10.1 as a component of openSUSE Leap 42.2 util-linux-systemd-2.28-10.1 as a component of openSUSE Leap 42.2 uuidd-2.28-10.1 as a component of openSUSE Leap 42.2 A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. CVE-2017-2616 openSUSE Leap 42.2:libblkid-devel-2.28-10.1 openSUSE Leap 42.2:libblkid-devel-32bit-2.28-10.1 openSUSE Leap 42.2:libblkid-devel-static-2.28-10.1 openSUSE Leap 42.2:libblkid1-2.28-10.1 openSUSE Leap 42.2:libblkid1-32bit-2.28-10.1 openSUSE Leap 42.2:libfdisk-devel-2.28-10.1 openSUSE Leap 42.2:libfdisk-devel-static-2.28-10.1 openSUSE Leap 42.2:libfdisk1-2.28-10.1 openSUSE Leap 42.2:libmount-devel-2.28-10.1 openSUSE Leap 42.2:libmount-devel-32bit-2.28-10.1 openSUSE Leap 42.2:libmount-devel-static-2.28-10.1 openSUSE Leap 42.2:libmount1-2.28-10.1 openSUSE Leap 42.2:libmount1-32bit-2.28-10.1 openSUSE Leap 42.2:libsmartcols-devel-2.28-10.1 openSUSE Leap 42.2:libsmartcols-devel-static-2.28-10.1 openSUSE Leap 42.2:libsmartcols1-2.28-10.1 openSUSE Leap 42.2:libuuid-devel-2.28-10.1 openSUSE Leap 42.2:libuuid-devel-32bit-2.28-10.1 openSUSE Leap 42.2:libuuid-devel-static-2.28-10.1 openSUSE Leap 42.2:libuuid1-2.28-10.1 openSUSE Leap 42.2:libuuid1-32bit-2.28-10.1 openSUSE Leap 42.2:python-libmount-2.28-10.2 openSUSE Leap 42.2:util-linux-2.28-10.1 openSUSE Leap 42.2:util-linux-lang-2.28-10.1 openSUSE Leap 42.2:util-linux-systemd-2.28-10.1 openSUSE Leap 42.2:uuidd-2.28-10.1 important Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00001.html https://www.suse.com/security/cve/CVE-2017-2616.html CVE-2017-2616 https://bugzilla.suse.com/1023041 SUSE Bug 1023041 https://bugzilla.suse.com/1123789 SUSE Bug 1123789