SUSE-SU-2022:1103-1

    Dashboard / Vulnerabilities / SUSE-SU-2022:1103-1

    SUSE-SU-2022:1103-1

    Published: 4 Apr 2022Last Modified: 4 Feb 2026
    Upstream:
    CVE-2021-37600

    Summary: Security update for util-linux

    Details: This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. (bsc#1194642) - Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642) - Warn if uuidd lock state is not usable. (bsc#1194642) - Fix 'su -s' bash completion. (bsc#1172427) - CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921) - Load /etc/default/su (bsc#1116347). - Prevent outdated pam files (bsc#1082293, bsc#1081947#c68). - Do not trim read-only volumes (bsc#1106214). - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - agetty: Reload issue only if it is really needed (bsc#1085196) - agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886) - blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235) - nologin: Add support for -c to prevent error from su -c. (bsc#1151708) - Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389) - libblkid: Do not trigger CDROM autoclose. (bsc#1084671) - Avoid sulogin failing on not existing or not functional console devices. (bsc#1175514) - Build with libudev support to support non-root users. (bsc#1169006) - lscpu: avoid segfault on PowerPC systems with valid hardware configurations. (bsc#1175623, bsc#1178554, bsc#1178825) - Fix for warning on mounts to CIFS with mount. (bsc#1174942)

    References: https://www.suse.com/support/update/announcement/2022/suse-su-20221103-1/, https://bugzilla.suse.com/1038841, https://bugzilla.suse.com/1081947, https://bugzilla.suse.com/1082293, https://bugzilla.suse.com/1084671, https://bugzilla.suse.com/1085196, https://bugzilla.suse.com/1106214, https://bugzilla.suse.com/1116347, https://bugzilla.suse.com/1122417, https://bugzilla.suse.com/1125886, https://bugzilla.suse.com/1135534, https://bugzilla.suse.com/1135708, https://bugzilla.suse.com/1151708, https://bugzilla.suse.com/1168235, https://bugzilla.suse.com/1168389, https://bugzilla.suse.com/1169006, https://bugzilla.suse.com/1172427, https://bugzilla.suse.com/1174942, https://bugzilla.suse.com/1175514, https://bugzilla.suse.com/1175623, https://bugzilla.suse.com/1178236, https://bugzilla.suse.com/1178554, https://bugzilla.suse.com/1178825, https://bugzilla.suse.com/1188921, https://bugzilla.suse.com/1194642, https://www.suse.com/security/cve/CVE-2021-37600

    Affected packages

    Package

    Name: python-libmount

    Purl: pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.28-44.35.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2022:1103-1 | CVE-DB