FlawAtlas
Search the atlas
SUSE-SU-2017:0553-1 Not scored

Security update for util-linux

This update for util-linux fixes a number of bugs and two security issues. The following security bugs were fixed: - CVE-2016-5011: Infinite loop DoS in libblkid while parsing DOS partition (bsc#988361) - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). The following non-security bugs were fixed: - bsc#1008965: Ensure that the option 'users,exec,dev,suid' work as expected on NFS mounts - bsc#1012504: Fix regressions in safe loop re-use patch set for libmount - bsc#1012632: Disable ro checks for mtab - bsc#1020077: fstrim: De-duplicate btrfs sub-volumes for 'fstrim -a' and bind mounts - bsc#947494: mount -a would fail to recognize btrfs already mounted, address loop re-use in libmount - bsc#966891: Conflict in meaning of losetup -L. This switch in SLE12 SP1 and SP2 continues to carry the meaning of --logical-blocksize instead of upstream --nooverlap - bsc#978993: cfdisk would mangle some text output - bsc#982331: libmount: ignore redundant slashes - bsc#983164: mount uid= and gid= would reject valid non UID/GID values - bsc#987176: When mounting a subfolder of a CIFS share, mount -a would show the mount as busy - bsc#1019332: lscpu: Implement WSL detection and work around crash

Exploit probability Not scored
Published February 23, 2017
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 12-LTSS python-libmount
SUSE:Linux Enterprise Server 12-LTSS util-linux
SUSE:Linux Enterprise Server 12-LTSS util-linux-systemd
SUSE:Linux Enterprise Server for SAP Applications 12 python-libmount
SUSE:Linux Enterprise Server for SAP Applications 12 util-linux
SUSE:Linux Enterprise Server for SAP Applications 12 util-linux-systemd

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2017:0553-1

This update for util-linux fixes a number of bugs and two security issues. The following security bugs were fixed: - CVE-2016-5011: Infinite loop DoS in libblkid while parsing DOS partition (bsc#988361) - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). The following non-security bugs were fixed: - bsc#1008965: Ensure that the option 'users,exec,dev,suid' work as expected on NFS mounts - bsc#1012504: Fix regressions in safe loop re-use patch set for libmount - bsc#1012632: Disable ro checks for mtab - bsc#1020077: fstrim: De-duplicate btrfs sub-volumes for 'fstrim -a' and bind mounts - bsc#947494: mount -a would fail to recognize btrfs already mounted, address loop re-use in libmount - bsc#966891: Conflict in meaning of losetup -L. This switch in SLE12 SP1 and SP2 continues to carry the meaning of --logical-blocksize instead of upstream --nooverlap - bsc#978993: cfdisk would mangle some text output - bsc#982331: libmount: ignore redundant slashes - bsc#983164: mount uid= and gid= would reject valid non UID/GID values - bsc#987176: When mounting a subfolder of a CIFS share, mount -a would show the mount as busy - bsc#1019332: lscpu: Implement WSL detection and work around crash

View original source

05 / REFERENCES

Further evidence