SUSE-SU-2025:20304-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520304-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20304-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20304-1
Upstream
Related
Published
2025-05-08T12:24:01Z
Modified
2026-03-11T07:30:38Z
Summary
Security update for util-linux
Details

This update for util-linux fixes the following issues:

  • Updated to version 2.40.4:

    • agetty: Prevent cursor escape (bsc#1194818)
    • chcpu(8): Document CPU deconfiguring behavior
    • fdisk: SGI fixes
    • hardlink: fix memory corruption
    • hardlink.1 directory|file is mandatory
    • lib/env: fix env_list_setenv() for strings without '='
    • libblkid: (exfat) validate fields used by prober (gpt) use blkid_probe_verify_csum() for partition array checksum add FSLASTBLOCK for swaparea bitlocker fix version on big-endian systems
    • libfdisk: make sure libblkid uses the same sector size
    • libmount: extract common error handling function propagate first error of multiple filesystem types
    • logger: correctly format tv_usec
    • lscpu: Skip aarch64 decode path for rest of the architectures (bsc#1229476)
    • lsns: ignore ESRCH errors reported when accessing files under /proc
    • mkswap: set selinux label also when creating file
    • more: make sure we have data on stderr
    • nsenter: support empty environ
    • umount, losetup: Document loop destroy behavior (bsc#1159034).
    • uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    • Refresh util-linux.keyring. Key validity was extended.

  • Update to version 2.40.2:

    • cfdisk: fix possible integer overflow
    • libmount: improving robustness in reading kernel messages, add pidfs to pseudo fs list
    • lscpu: New Arm Cortex part numbers fix hang of lscpu -e (bsc#1225598)
    • lsfd: Refactor the pidfd logic, support pidfs
    • mkswap.8.adoc: update note regarding swapfile creation
    • setpgid: make -f work

  • Enable kernel mountfd API, as it should be already stable (PED-9752).

  • Move autoreconf back to %build.

  • Add devel dependencies.

  • Remove util-linux-rpmlintrc. It is no more needed with multibuild.

  • uncomment "autoreconf --install" to use the new version of automake

  • disable libmagic in more(1) for binary detection (bsc#1225197)

  • add support for pidfs in kernel 6.9 (bsc#1224285)

  • Update to version 2.40.1:

    • more: clean processes not cleaned up after failed SSH session using up 100% CPU (bsc#1220117)
    • CVE-2024-28085: Fixed improper neutralization of escape sequences in wall (bsc#1221831)
    • chcpu: document limitations of -g (bsc#1218609)
    • lscpu: even more Arm part numbers (bsc#1223605)
References

Affected packages

SUSE:Linux Micro 6.1 / util-linux

Package

Name
util-linux
Purl
pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.40.4-slfo.1.1_1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "lastlog2":  "2.40.4-slfo.1.1_1.1",
            "libblkid1":  "2.40.4-slfo.1.1_1.1",
            "libfdisk1":  "2.40.4-slfo.1.1_1.1",
            "liblastlog2-2":  "2.40.4-slfo.1.1_1.1",
            "libmount1":  "2.40.4-slfo.1.1_1.1",
            "libsmartcols1":  "2.40.4-slfo.1.1_1.1",
            "libuuid1":  "2.40.4-slfo.1.1_1.1",
            "util-linux":  "2.40.4-slfo.1.1_1.1",
            "util-linux-systemd":  "2.40.4-slfo.1.1_1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20304-1.json"

SUSE:Linux Micro 6.1 / util-linux-systemd

Package

Name
util-linux-systemd
Purl
pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.40.4-slfo.1.1_1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "lastlog2":  "2.40.4-slfo.1.1_1.1",
            "libblkid1":  "2.40.4-slfo.1.1_1.1",
            "libfdisk1":  "2.40.4-slfo.1.1_1.1",
            "liblastlog2-2":  "2.40.4-slfo.1.1_1.1",
            "libmount1":  "2.40.4-slfo.1.1_1.1",
            "libsmartcols1":  "2.40.4-slfo.1.1_1.1",
            "libuuid1":  "2.40.4-slfo.1.1_1.1",
            "util-linux":  "2.40.4-slfo.1.1_1.1",
            "util-linux-systemd":  "2.40.4-slfo.1.1_1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20304-1.json"