{"id":"SUSE-SU-2019:2307-1","aliases":[],"status":"published","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- De-duplicate fstrim -A properly (bsc#1127701).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)\n- Hardening for su wrappers (bsc#353876)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-09-05T12:45:17Z","modified":"2019-09-05T12:45:17Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"shadow","fixed_in":["4.6-3.5.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"util-linux","fixed_in":["2.33.1-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"util-linux-systemd","fixed_in":["2.33.1-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"util-linux-systemd","fixed_in":["2.33.1-4.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-3.5.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-4.5.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192307-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081947","tags":["report"]},{"url":"https://bugzilla.suse.com/1082293","tags":["report"]},{"url":"https://bugzilla.suse.com/1085196","tags":["report"]},{"url":"https://bugzilla.suse.com/1106214","tags":["report"]},{"url":"https://bugzilla.suse.com/1121197","tags":["report"]},{"url":"https://bugzilla.suse.com/1122417","tags":["report"]},{"url":"https://bugzilla.suse.com/1125886","tags":["report"]},{"url":"https://bugzilla.suse.com/1127701","tags":["report"]},{"url":"https://bugzilla.suse.com/1135534","tags":["report"]},{"url":"https://bugzilla.suse.com/1135708","tags":["report"]},{"url":"https://bugzilla.suse.com/1141113","tags":["report"]},{"url":"https://bugzilla.suse.com/353876","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2019:2307-1","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- De-duplicate fstrim -A properly (bsc#1127701).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)\n- Hardening for su wrappers (bsc#353876)\n","status":"published","published":"2019-09-05T12:45:17Z","modified":"2019-09-05T12:45:17Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}