{"id":"openSUSE-SU-2019:2121-1","aliases":[],"status":"published","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- De-duplicate fstrim -A properly (bsc#1127701).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)\n- Hardening for su wrappers (bsc#353876)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-09-10T18:18:24Z","modified":"2019-09-10T18:18:24Z","fixes":[{"ecosystem":"openSUSE:Leap 15.1","package":"python3-libmount","fixed_in":["2.33.1-lp151.3.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"shadow","fixed_in":["4.6-lp151.2.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"util-linux","fixed_in":["2.33.1-lp151.3.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"util-linux-systemd","fixed_in":["2.33.1-lp151.3.3.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"python3-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-lp151.3.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-lp151.2.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-lp151.3.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-lp151.3.3.2"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ARJ2I4O4MSDMPIJM52GQQGJZTIJR7OER/#ARJ2I4O4MSDMPIJM52GQQGJZTIJR7OER","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081947","tags":["report"]},{"url":"https://bugzilla.suse.com/1082293","tags":["report"]},{"url":"https://bugzilla.suse.com/1085196","tags":["report"]},{"url":"https://bugzilla.suse.com/1106214","tags":["report"]},{"url":"https://bugzilla.suse.com/1121197","tags":["report"]},{"url":"https://bugzilla.suse.com/1122417","tags":["report"]},{"url":"https://bugzilla.suse.com/1125886","tags":["report"]},{"url":"https://bugzilla.suse.com/1127701","tags":["report"]},{"url":"https://bugzilla.suse.com/1135534","tags":["report"]},{"url":"https://bugzilla.suse.com/1135708","tags":["report"]},{"url":"https://bugzilla.suse.com/1141113","tags":["report"]},{"url":"https://bugzilla.suse.com/353876","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2019:2121-1","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- De-duplicate fstrim -A properly (bsc#1127701).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)\n- Hardening for su wrappers (bsc#353876)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-09-10T18:18:24Z","modified":"2019-09-10T18:18:24Z","updated_at":"2026-11-02T16:58:30.784344Z"}]}}