{"id":"openSUSE-SU-2019:2175-1","aliases":[],"status":"published","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Hardening for su wrappers (bsc#353876)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-09-24T08:20:26Z","modified":"2019-09-24T08:20:26Z","fixes":[{"ecosystem":"openSUSE:Leap 15.0","package":"shadow","fixed_in":["4.5-lp150.11.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"util-linux","fixed_in":["2.31.1-lp150.7.10.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5-lp150.11.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-lp150.7.10.2"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KR6XAIJCCU2HEVN7MXPNJNSES7DCPX52/#KR6XAIJCCU2HEVN7MXPNJNSES7DCPX52","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081947","tags":["report"]},{"url":"https://bugzilla.suse.com/1082293","tags":["report"]},{"url":"https://bugzilla.suse.com/1085196","tags":["report"]},{"url":"https://bugzilla.suse.com/1106214","tags":["report"]},{"url":"https://bugzilla.suse.com/1121197","tags":["report"]},{"url":"https://bugzilla.suse.com/1122417","tags":["report"]},{"url":"https://bugzilla.suse.com/1125886","tags":["report"]},{"url":"https://bugzilla.suse.com/1135534","tags":["report"]},{"url":"https://bugzilla.suse.com/1135708","tags":["report"]},{"url":"https://bugzilla.suse.com/353876","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2019:2175-1","title":"Security update for util-linux and shadow","description":"This update for util-linux and shadow fixes the following issues:\n\nutil-linux:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Prevent outdated pam files (bsc#1082293).\n- Do not trim read-only volumes (bsc#1106214).\n- Integrate pam_keyinit pam module to login (bsc#1081947).\n- Perform one-time reset of /etc/default/su (bsc#1121197).\n- Fix problems in reading of login.defs values (bsc#1121197)\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).\n\nshadow:\n\n- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)\n- Hardening for su wrappers (bsc#353876)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-09-24T08:20:26Z","modified":"2019-09-24T08:20:26Z","updated_at":"2026-11-02T16:58:30.784344Z"}]}}
