SUSE-SU-2019:2392-1
Security update for util-linux and shadow
No scoreFix available
This update for util-linux and shadow fixes the following issues:
util-linux:
- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Prevent outdated pam files (bsc#1082293).
- Do not trim read-only volumes (bsc#1106214).
- Integrate pam_keyinit pam module to login (bsc#1081947).
- Perform one-time reset of /etc/default/su (bsc#1121197).
- Fix problems in reading of login.defs values (bsc#1121197)
- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
- raw.service: Add RemainAfterExit=yes (bsc#1135534).
- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).
shadow:
- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Hardening for su wrappers (bsc#353876)
What each source reports
OSVNo score
Security update for util-linux and shadow
This update for util-linux and shadow fixes the following issues:
util-linux:
- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Prevent outdated pam files (bsc#1082293).
- Do not trim read-only volumes (bsc#1106214).
- Integrate pam_keyinit pam module to login (bsc#1081947).
- Perform one-time reset of /etc/default/su (bsc#1121197).
- Fix problems in reading of login.defs values (bsc#1121197)
- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
- raw.service: Add RemainAfterExit=yes (bsc#1135534).
- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).
shadow:
- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Hardening for su wrappers (bsc#353876)
- Record
SUSE-SU-2019:2392-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadowSUSE:Linux Enterprise Module for Basesystem 15 | before 4.5-7.6.4 | 4.5-7.6.4 |
util-linuxSUSE:Linux Enterprise Module for Basesystem 15 | before 2.31.1-9.8.1 | 2.31.1-9.8.1 |
util-linux-systemdSUSE:Linux Enterprise Module for Basesystem 15 | before 2.31.1-9.8.1 | 2.31.1-9.8.1 |
util-linux-systemdSUSE:Linux Enterprise Module for Server Applications 15 | before 2.31.1-9.8.1 | 2.31.1-9.8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2019:2392-1 is a vulnerability with no CVSS score yet in shadow, published September 17, 2019. No source lists public exploit code. Fixed in shadow 4.5-7.6.4.