SUSE-SU-2022:0727-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20220727-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0727-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2022:0727-1

Related

Published

2022-03-04T09:39:43Z

Modified

2025-05-08T17:17:20.285205Z

Upstream

CVE-2021-3995

CVE-2021-3996

Summary

Security update for libeconf, shadow and util-linux

Details

This security update for libeconf, shadow and util-linux fix the following issues:

libeconf:

Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

Issues fixed in libeconf: - Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157) - Fixed different issues while writing string values to file. - Writing comments to file too. - Fixed crash while merging values. - Added econftool cat option (#146) - new API call: econfreadDirsHistory (showing ALL locations) - new API call: econfgetPath (absolute path of the configuration file) - Man pages libeconf.3 and econftool.8. - Handling multiline strings. - Added libeconfext which returns more information like linenr, comments, path of the configuration file,... - Econftool, an command line interface for handling configuration files. - Generating HTML API documentation with doxygen. - Improving error handling and semantic file check. - Joining entries with the same key to one single entry if env variable ECONFJOINSAME_ENTRIES has been set.

shadow:

The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

util-linux:

The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)
Allow use of larger values for start sector to prevent blockdev --report aborting (bsc#1188507)
Fixed blockdev --report using non-space characters as a field separator (bsc#1188507)
CVE-2021-3995: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)
CVE-2021-3996: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / libeconf

Package

Name: libeconf
Purl: pkg:rpm/suse/libeconf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.4+git20220104.962774f-150300.3.6.2

Ecosystem specific

{
    "binaries": [
        {
            "libuuid-devel-static": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libblkid-devel-static": "2.36.2-150300.4.14.3",
            "libuuid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libblkid1-32bit": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "util-linux-lang": "2.36.2-150300.4.14.3",
            "libfdisk-devel": "2.36.2-150300.4.14.3",
            "libmount-devel": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1-32bit": "2.36.2-150300.4.14.3",
            "libblkid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols-devel": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "libuuid1-32bit": "2.36.2-150300.4.14.3"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / shadow

Package

Name: shadow
Purl: pkg:rpm/suse/shadow&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.8.1-150300.4.3.8

Ecosystem specific

{
    "binaries": [
        {
            "libuuid-devel-static": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libblkid-devel-static": "2.36.2-150300.4.14.3",
            "libuuid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libblkid1-32bit": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "util-linux-lang": "2.36.2-150300.4.14.3",
            "libfdisk-devel": "2.36.2-150300.4.14.3",
            "libmount-devel": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1-32bit": "2.36.2-150300.4.14.3",
            "libblkid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols-devel": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "libuuid1-32bit": "2.36.2-150300.4.14.3"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / util-linux

Package

Name: util-linux
Purl: pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.36.2-150300.4.14.3

Ecosystem specific

{
    "binaries": [
        {
            "libuuid-devel-static": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libblkid-devel-static": "2.36.2-150300.4.14.3",
            "libuuid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libblkid1-32bit": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "util-linux-lang": "2.36.2-150300.4.14.3",
            "libfdisk-devel": "2.36.2-150300.4.14.3",
            "libmount-devel": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1-32bit": "2.36.2-150300.4.14.3",
            "libblkid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols-devel": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "libuuid1-32bit": "2.36.2-150300.4.14.3"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.36.2-150300.4.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libuuid-devel-static": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libblkid-devel-static": "2.36.2-150300.4.14.3",
            "libuuid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libblkid1-32bit": "2.36.2-150300.4.14.3",
            "libuuid1": "2.36.2-150300.4.14.3",
            "util-linux-lang": "2.36.2-150300.4.14.3",
            "libfdisk-devel": "2.36.2-150300.4.14.3",
            "libmount-devel": "2.36.2-150300.4.14.3",
            "libmount1": "2.36.2-150300.4.14.3",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libmount1-32bit": "2.36.2-150300.4.14.3",
            "libblkid-devel": "2.36.2-150300.4.14.3",
            "libsmartcols-devel": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "libuuid1-32bit": "2.36.2-150300.4.14.3"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP3 / util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.36.2-150300.4.14.2

Ecosystem specific

{
    "binaries": [
        {
            "uuidd": "2.36.2-150300.4.14.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Transactional Server 15 SP3 / libeconf

Package

Name: libeconf
Purl: pkg:rpm/suse/libeconf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Transactional%20Server%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.4+git20220104.962774f-150300.3.6.2

Ecosystem specific

{
    "binaries": [
        {
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / libeconf

Package

Name: libeconf
Purl: pkg:rpm/suse/libeconf&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.4+git20220104.962774f-150300.3.6.2

Ecosystem specific

{
    "binaries": [
        {
            "libmount1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libuuid1": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / shadow

Package

Name: shadow
Purl: pkg:rpm/suse/shadow&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.8.1-150300.4.3.8

Ecosystem specific

{
    "binaries": [
        {
            "libmount1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libuuid1": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / util-linux

Package

Name: util-linux
Purl: pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.36.2-150300.4.14.3

Ecosystem specific

{
    "binaries": [
        {
            "libmount1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libuuid1": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / util-linux-systemd

Package

Name: util-linux-systemd
Purl: pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.36.2-150300.4.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libmount1": "2.36.2-150300.4.14.3",
            "login_defs": "4.8.1-150300.4.3.8",
            "libfdisk1": "2.36.2-150300.4.14.3",
            "libsmartcols1": "2.36.2-150300.4.14.3",
            "util-linux": "2.36.2-150300.4.14.3",
            "shadow": "4.8.1-150300.4.3.8",
            "libeconf0": "0.4.4+git20220104.962774f-150300.3.6.2",
            "libuuid1": "2.36.2-150300.4.14.3",
            "libblkid1": "2.36.2-150300.4.14.3",
            "util-linux-systemd": "2.36.2-150300.4.14.2"
        }
    ]
}