CVE-2015-5218

A buffer overflow in the colcrt command in util-linux can lead to a crash when given a large input (CVE-2015-5218).

These are all security issues fixed in the libblkid-devel-2.28.2-2.1 package on the GA media of openSUSE Tumbleweed.

This update provides fixes and enhancements to bash-completion and util-linux.

bash-completion:

• Improve completion of LVM commands. (bsc#946875)
• Fix completion with backticks. (bsc#940835)
• Make ls completion smarter. (bsc#889319)
• Avoid negative cword position counter. (bsc#922758)
• Avoid trouble if restricted characters of the shell (e.g. exclamation mark) are used in PS1. (bsc#903362)
• Expand variables whose value is a directory to avoid escaped dollar sign. (bsc#905348)
• Remove completions conflicting with util-linux. (bsc#977259)
• Improve handling of sub commands which will be expanded by backticks. (bsc#963140)
• Fix completion within a directory even if local sub directories exist. (bsc#977336)
• Allow completions list. (bsc#958462)
• Improve handling of completions of which result in variables. (bsc#940837, bsc#959299)

util-linux:

• Reuse existing loop device to prevent possible data corruption when multiple -o loop are used to mount a single file. (bsc#947494)
• Remove incorrect --with-bashcompletiondir that breaks bash-completion, use path in bash-completion.pc instead. (bsc#977259)
• Fix blkid to wipe correct area for probes with offset. (bsc#976141)
• Fix and improve function of lscpu on Power Systems. (bsc#975082)
• Fix crash while evaluating root of btrfs. (bsc#972684)
• Make sulogin call tcfinal unconditionally. (bsc#970404)
• Fixing 'mount -a' for loop devices. (bsc#947494)
• Prevent 'mount -a' from mounting btrfs volumes multiple times. (bsc#947494)
• Add support for locked root accounts in sulogin. (bsc#963399)
• Remove Persistent= directive from fstrim for systemd versions older than 212. (bsc#956540, bsc#953691, bsc#954482)
• Prevent colcrt buffer overflow. (bsc#949754, CVE-2015-5218)
• Do not segfault when TERM is not defined or wrong. (bsc#903440)
• Fix fsck -C {fd} parsing. (bsc#923777, bsc#903738)
• Add patches to fix lsblk output in some situations. (bsc#943415, bsc#950778)
• Fix mount point lookup (and mount -a) if the path contains //. (bsc#931955)
• Follow multipath-tools partition names configuration. (bsc#880468)
• Fix recognition of /dev/dm-N partitions names. (bsc#880468)
• Fix lsblk -f and fdisk -l on devices with nodes in /dev subdirectory. (bsc#924994)

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

• Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
• Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

• CVE-2015-3238

libtasn1:

• CVE-2015-3622
• CVE-2016-4008

libidn:

• CVE-2015-2059
• CVE-2015-8948
• CVE-2016-6261
• CVE-2016-6262
• CVE-2016-6263

zlib:

• CVE-2016-9840
• CVE-2016-9841
• CVE-2016-9842
• CVE-2016-9843

curl:

• CVE-2016-5419
• CVE-2016-5420
• CVE-2016-5421
• CVE-2016-7141
• CVE-2016-7167
• CVE-2016-8615
• CVE-2016-8616
• CVE-2016-8617
• CVE-2016-8618
• CVE-2016-8619
• CVE-2016-8620
• CVE-2016-8621
• CVE-2016-8622
• CVE-2016-8623
• CVE-2016-8624
• CVE-2016-9586
• CVE-2017-1000100
• CVE-2017-1000101
• CVE-2017-7407

openssl:

• CVE-2016-2105
• CVE-2016-2106
• CVE-2016-2107
• CVE-2016-2108
• CVE-2016-2109
• CVE-2016-2177
• CVE-2016-2178
• CVE-2016-2179
• CVE-2016-2180
• CVE-2016-2181
• CVE-2016-2182
• CVE-2016-2183
• CVE-2016-6302
• CVE-2016-6303
• CVE-2016-6304
• CVE-2016-6306

libxml2:

• CVE-2014-0191
• CVE-2015-8806
• CVE-2016-1762
• CVE-2016-1833
• CVE-2016-1834
• CVE-2016-1835
• CVE-2016-1837
• CVE-2016-1838
• CVE-2016-1839
• CVE-2016-1840
• CVE-2016-2073
• CVE-2016-3627
• CVE-2016-3705
• CVE-2016-4447
• CVE-2016-4448
• CVE-2016-4449
• CVE-2016-4483
• CVE-2016-4658
• CVE-2016-9318
• CVE-2016-9597
• CVE-2017-9047
• CVE-2017-9048
• CVE-2017-9049
• CVE-2017-9050

util-linux:

• CVE-2015-5218
• CVE-2016-5011
• CVE-2017-2616

cracklib:

• CVE-2016-6318

systemd:

• CVE-2014-9770
• CVE-2015-8842
• CVE-2016-7796

pcre:

• CVE-2014-8964
• CVE-2015-2325
• CVE-2015-2327
• CVE-2015-2328
• CVE-2015-3210
• CVE-2015-3217
• CVE-2015-5073
• CVE-2015-8380
• CVE-2015-8381
• CVE-2015-8382
• CVE-2015-8383
• CVE-2015-8384
• CVE-2015-8385
• CVE-2015-8386
• CVE-2015-8387
• CVE-2015-8388
• CVE-2015-8389
• CVE-2015-8390
• CVE-2015-8391
• CVE-2015-8392
• CVE-2015-8393
• CVE-2015-8394
• CVE-2015-8395
• CVE-2016-1283
• CVE-2016-3191

appamor:

• CVE-2017-6507

bash:

• CVE-2014-6277
• CVE-2014-6278
• CVE-2016-0634
• CVE-2016-7543

cpio:

• CVE-2016-2037

glibc:

• CVE-2016-1234
• CVE-2016-3075
• CVE-2016-3706
• CVE-2016-4429
• CVE-2017-1000366

perl:

• CVE-2015-8853
• CVE-2016-1238
• CVE-2016-2381
• CVE-2016-6185

libssh2_org:

• CVE-2016-0787

expat:

• CVE-2012-6702
• CVE-2015-1283
• CVE-2016-0718
• CVE-2016-5300
• CVE-2016-9063
• CVE-2017-9233

ncurses:

• CVE-2017-10684
• CVE-2017-10685
• CVE-2017-11112
• CVE-2017-11113

libksba:

• CVE-2016-4574
• CVE-2016-4579

libgcrypt:

• CVE-2015-7511
• CVE-2016-6313
• CVE-2017-7526

dbus-1:

• CVE-2014-7824
• CVE-2015-0245

Finally, the following packages received non-security fixes:

• augeas
• bzip2
• ca-certificates-mozilla
• coreutils
• cryptsetup
• cyrus-sasl
• dirmngr
• e2fsprogs
• findutils
• gpg2
• insserv-compat
• kmod
• libcap
• libsolv
• libzypp
• openldap2
• p11-kit
• permissions
• procps
• rpm
• sed
• shadow
• zypper

This update for util-linux fixes the following issues:

• CVE-2015-5218: Prevent colcrt buffer overflow. (bsc#949754)

These non-security issues were fixed:

• Mount crashes when trying to mount shmfs while SELinux is active. (bsc#1040414)
• Fix lsblk -f on CCISS and other devices with nodes in /dev subdirectory. (bsc#924994)
• Fix script(1) hang caused by mis-interpreted EOF on big-endian platforms. (bsc#930236)
• Do not segfault when TERM is not defined or wrong. (bsc#903440)
• Update and fix mount XFS documentation. (bsc#925705)
• Fix recognition of /dev/dm-N partitions names. (bsc#931607)
• Follow SUSE Linux Enterprise 11 device mapper partition names configuration. (bsc#931607)
• Fix recognition of device mapper partitions. (bsc#923904)
• Fix fsck -C {fd} parsing. (bsc#923777, bsc#903738)

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.