SUSE-SU-2019:2307-1

Dashboard / Vulnerabilities / SUSE-SU-2019:2307-1

SUSE-SU-2019:2307-1

Summary: Security update for util-linux and shadow

Details: This update for util-linux and shadow fixes the following issues: util-linux: - Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Prevent outdated pam files (bsc#1082293). - De-duplicate fstrim -A properly (bsc#1127701). - Do not trim read-only volumes (bsc#1106214). - Integrate pam_keyinit pam module to login (bsc#1081947). - Perform one-time reset of /etc/default/su (bsc#1121197). - Fix problems in reading of login.defs values (bsc#1121197) - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - raw.service: Add RemainAfterExit=yes (bsc#1135534). - agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886) - libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832) - Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197). shadow: - Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Fix segfault in useradd during setting password inactivity period. (bsc#1141113) - Hardening for su wrappers (bsc#353876)

References: https://www.suse.com/support/update/announcement/2019/suse-su-20192307-1/, https://bugzilla.suse.com/1081947, https://bugzilla.suse.com/1082293, https://bugzilla.suse.com/1085196, https://bugzilla.suse.com/1106214, https://bugzilla.suse.com/1121197, https://bugzilla.suse.com/1122417, https://bugzilla.suse.com/1125886, https://bugzilla.suse.com/1127701, https://bugzilla.suse.com/1135534, https://bugzilla.suse.com/1135708, https://bugzilla.suse.com/1141113, https://bugzilla.suse.com/353876