Oval Definition:oval:org.opensuse.security:def:4790
Revision Date:2020-12-02Version:1
Title:Security update for util-linux and shadow (Moderate)
Description:

This update for util-linux and shadow fixes the following issues:

util-linux:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Prevent outdated pam files (bsc#1082293). - Do not trim read-only volumes (bsc#1106214). - Integrate pam_keyinit pam module to login (bsc#1081947). - Perform one-time reset of /etc/default/su (bsc#1121197). - Fix problems in reading of login.defs values (bsc#1121197) - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - raw.service: Add RemainAfterExit=yes (bsc#1135534). - agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886) - Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).

shadow:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Hardening for su wrappers (bsc#353876)
Family:unixClass:patch
Status:Reference(s):1001215
1047238
1050911
1051510
1054914
1055117
1056686
1060662
1061840
1061843
1064597
1064701
1065600
1065729
1066369
1071009
1071306
1078248
1081947
1082293
1082555
1085030
1085196
1085416
1085536
1085539
1086103
1087092
1087240
1090734
1091171
1093205
1102097
1103557
1104902
1104918
1106061
1106214
1106284
1106434
1108382
1112028
1112894
1112899
1112902
1112903
1112905
1112906
1112907
1113722
1114279
1114542
1116708
1117963
1117964
1117965
1117966
1117967
1118689
1119086
1120507
1120876
1120902
1120937
1121086
1121197
1122417
1122838
1122839
1123105
1123959
1124370
1125886
1129424
1129519
1129664
1131107
1131281
1131565
1133021
1134291
1134881
1134882
1135219
1135534
1135642
1135708
1135855
1135897
1136261
1137811
1137884
1138539
1139020
1139021
1139101
1139500
1140012
1140426
1140487
1141450
1141543
1141554
1142019
1142076
1142109
1142117
1142118
1142119
1142496
1142541
1142635
1142685
1142701
1142857
1143300
1143466
1143765
1143841
1143843
1144123
1144333
1144474
1144518
1144718
1144813
1144880
1144886
1144912
1144920
1144979
1145010
1145051
1145059
1145189
1145235
1145300
1145302
1145388
1145389
1145390
1145391
1145392
1145393
1145394
1145395
1145396
1145397
1145408
1145409
1145661
1145678
1145687
1145920
1145922
1145934
1145937
1145940
1145941
1145942
1146074
1146084
1146163
1146285
1146346
1146351
1146352
1146361
1146376
1146378
1146381
1146391
1146399
1146413
1146425
1146512
1146514
1146516
1146519
1146524
1146526
1146529
1146531
1146543
1146547
1146550
1146575
1146589
1146678
1146938
1148031
1148032
1148033
1148034
1148035
1148093
1148133
1148192
1148196
1148198
1148202
1148303
1148363
1148379
1148394
1148527
1148574
1148616
1148617
1148619
1148859
1148868
1149053
1149083
1149104
1149105
1149106
1149197
1149214
1149224
1149325
1149376
1149413
1149418
1149424
1149522
1149527
1149539
1149552
1149591
1149602
1149612
1149626
1149652
1149713
1149940
1149976
1150025
1150033
1150112
1150562
1150727
1150860
1150861
1150933
1157465
1159284
1159670
1162327
1165572
1166916
1167437
1168340
1169604
1169800
1170104
1170288
1170595
1171906
1172075
1172442
1172443
1172906
1172935
1173072
1173197
1173389
1174165
1174321
1175568
1175987
1176024
1176294
1176397
1177867
1178319
1178361
1178362
1178485
353876
999199
CVE-2009-0163
CVE-2009-1886
CVE-2009-1888
CVE-2009-2813
CVE-2009-2820
CVE-2009-2906
CVE-2009-2948
CVE-2009-3553
CVE-2010-0393
CVE-2010-0540
CVE-2010-0542
CVE-2010-0547
CVE-2010-0728
CVE-2010-0787
CVE-2010-1748
CVE-2010-2941
CVE-2012-1586
CVE-2012-5519
CVE-2012-6094
CVE-2014-2856
CVE-2014-3537
CVE-2014-5029
CVE-2014-5030
CVE-2014-5031
CVE-2016-7044
CVE-2016-7045
CVE-2016-7553
CVE-2017-18551
CVE-2018-0886
CVE-2018-1000852
CVE-2018-17189
CVE-2018-17199
CVE-2018-20976
CVE-2018-21008
CVE-2018-8784
CVE-2018-8785
CVE-2018-8786
CVE-2018-8787
CVE-2018-8788
CVE-2018-8789
CVE-2019-10207
CVE-2019-12269
CVE-2019-14814
CVE-2019-14815
CVE-2019-14816
CVE-2019-14835
CVE-2019-15030
CVE-2019-15031
CVE-2019-15090
CVE-2019-15098
CVE-2019-15117
CVE-2019-15118
CVE-2019-15211
CVE-2019-15212
CVE-2019-15214
CVE-2019-15215
CVE-2019-15216
CVE-2019-15217
CVE-2019-15218
CVE-2019-15219
CVE-2019-15220
CVE-2019-15221
CVE-2019-15222
CVE-2019-15239
CVE-2019-15290
CVE-2019-15292
CVE-2019-15538
CVE-2019-15666
CVE-2019-15902
CVE-2019-15917
CVE-2019-15919
CVE-2019-15920
CVE-2019-15921
CVE-2019-15924
CVE-2019-15926
CVE-2019-15927
CVE-2019-18897
CVE-2019-9456
CVE-2020-11080
CVE-2020-11651
CVE-2020-11652
CVE-2020-11996
CVE-2020-14093
CVE-2020-14154
CVE-2020-14954
CVE-2020-15103
CVE-2020-16846
CVE-2020-17490
CVE-2020-25592
CVE-2020-7598
CVE-2020-8027
CVE-2020-8174
SUSE-SU-2016:2524-1
SUSE-SU-2019:0504-1
SUSE-SU-2019:0539-1
SUSE-SU-2019:1576-1
SUSE-SU-2019:2392-1
SUSE-SU-2020:1576-1
SUSE-SU-2020:1771-1
SUSE-SU-2020:1841-1
SUSE-SU-2020:1973-1
SUSE-SU-2020:2409-1
SUSE-SU-2020:2712-2
SUSE-SU-2020:3244-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 11-SECURITY
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 5
SUSE Package Hub for SUSE Linux Enterprise 12
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND cifs-utils-6.4-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • accountsservice-0.6.35-3 is installed
  • OR accountsservice-lang-0.6.35-3 is installed
  • OR libaccountsservice0-0.6.35-3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • accountsservice-0.6.42-14 is installed
  • OR accountsservice-lang-0.6.42-14 is installed
  • OR libaccountsservice0-0.6.42-14 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • expat-2.1.0-20 is installed
  • OR libexpat1-2.1.0-20 is installed
  • OR libexpat1-32bit-2.1.0-20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND busybox-1.21.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 is installed
  • AND python-PyYAML-3.10-15.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP1 is installed
  • AND Package Information
  • ctdb-4.2.4-26.2 is installed
  • OR samba-4.2.4-26.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • libpacemaker3-1.1.15-21.1 is installed
  • OR pacemaker-1.1.15-21.1 is installed
  • OR pacemaker-cli-1.1.15-21.1 is installed
  • OR pacemaker-cts-1.1.15-21.1 is installed
  • OR pacemaker-remote-1.1.15-21.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP4 is installed
  • AND lighttpd-1.4.35-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND fence-agents-4.4.0+git.1558595666.5f79f9e9-3.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • accountsservice-0.6.42-16.3 is installed
  • OR accountsservice-lang-0.6.42-16.3 is installed
  • OR libaccountsservice0-0.6.42-16.3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_38-44-default-2-7.1 is installed
  • OR kgraft-patch-3_12_38-44-xen-2-7.1 is installed
  • OR kgraft-patch-SLE12_Update_3-2-7.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • util-linux-systemd-2.31.1-9.8 is installed
  • OR uuidd-2.31.1-9.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed
  • AND Package Information
  • libjavascriptcoregtk-4_0-18-2.24.1-2.41 is installed
  • OR libwebkit2gtk-4_0-37-2.24.1-2.41 is installed
  • OR libwebkit2gtk3-lang-2.24.1-2.41 is installed
  • OR typelib-1_0-JavaScriptCore-4_0-2.24.1-2.41 is installed
  • OR typelib-1_0-WebKit2-4_0-2.24.1-2.41 is installed
  • OR typelib-1_0-WebKit2WebExtension-4_0-2.24.1-2.41 is installed
  • OR webkit2gtk-4_0-injected-bundles-2.24.1-2.41 is installed
  • OR webkit2gtk3-2.24.1-2.41 is installed
  • OR webkit2gtk3-devel-2.24.1-2.41 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND Package Information
  • e2fsprogs-1.41.9-2.7.1 is installed
  • OR libcom_err2-1.41.9-2.7.1 is installed
  • OR libcom_err2-32bit-1.41.9-2.7.1 is installed
  • OR libcom_err2-x86-1.41.9-2.7.1 is installed
  • OR libext2fs2-1.41.9-2.7.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND clamav-0.97.7-0.3.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3-LTSS is installed
  • AND Package Information
  • bind-9.9.6P1-0.30.1 is installed
  • OR bind-chrootenv-9.9.6P1-0.30.1 is installed
  • OR bind-doc-9.9.6P1-0.30.1 is installed
  • OR bind-libs-9.9.6P1-0.30.1 is installed
  • OR bind-libs-32bit-9.9.6P1-0.30.1 is installed
  • OR bind-utils-9.9.6P1-0.30.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11-SECURITY is installed
  • AND Package Information
  • libopenssl1-devel-1.0.1g-0.35.1 is installed
  • OR libopenssl1_0_0-1.0.1g-0.35.1 is installed
  • OR libopenssl1_0_0-32bit-1.0.1g-0.35.1 is installed
  • OR libopenssl1_0_0-x86-1.0.1g-0.35.1 is installed
  • OR openssl1-1.0.1g-0.35.1 is installed
  • OR openssl1-doc-1.0.1g-0.35.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • libpython2_7-1_0-2.7.7-9.3 is installed
  • OR libpython2_7-1_0-32bit-2.7.7-9.3 is installed
  • OR python-2.7.7-9.1 is installed
  • OR python-32bit-2.7.7-9.1 is installed
  • OR python-base-2.7.7-9.3 is installed
  • OR python-base-32bit-2.7.7-9.3 is installed
  • OR python-curses-2.7.7-9.1 is installed
  • OR python-demo-2.7.7-9.1 is installed
  • OR python-doc-2.7.7-9.1 is installed
  • OR python-doc-pdf-2.7.7-9.1 is installed
  • OR python-gdbm-2.7.7-9.1 is installed
  • OR python-idle-2.7.7-9.1 is installed
  • OR python-tk-2.7.7-9.1 is installed
  • OR python-xml-2.7.7-9.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • libneon27-0.30.0-3 is installed
  • OR libneon27-32bit-0.30.0-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-28 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • MozillaFirefox-52.2.0esr-108 is installed
  • OR MozillaFirefox-translations-52.2.0esr-108 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND apache-commons-httpclient-3.1-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr3.50-28.2 is installed
  • OR java-1_7_1-ibm-alsa-1.7.1_sr3.50-28.2 is installed
  • OR java-1_7_1-ibm-devel-1.7.1_sr3.50-28.2 is installed
  • OR java-1_7_1-ibm-jdbc-1.7.1_sr3.50-28.2 is installed
  • OR java-1_7_1-ibm-plugin-1.7.1_sr3.50-28.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • bind-9.9.9P1-49 is installed
  • OR bind-chrootenv-9.9.9P1-49 is installed
  • OR bind-doc-9.9.9P1-49 is installed
  • OR bind-libs-9.9.9P1-49 is installed
  • OR bind-utils-9.9.9P1-49 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • nodejs8-8.17.0-3.32 is installed
  • OR nodejs8-devel-8.17.0-3.32 is installed
  • OR nodejs8-docs-8.17.0-3.32 is installed
  • OR npm8-8.17.0-3.32 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
  • AND Package Information
  • libgcrypt-devel-1.5.0-0.15.2 is installed
  • OR libgcrypt-devel-32bit-1.5.0-0.15.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.45.1 is installed
  • OR ImageMagick-devel-6.4.3.6-7.45.1 is installed
  • OR libMagick++-devel-6.4.3.6-7.45.1 is installed
  • OR libMagick++1-6.4.3.6-7.45.1 is installed
  • OR libMagickWand1-6.4.3.6-7.45.1 is installed
  • OR libMagickWand1-32bit-6.4.3.6-7.45.1 is installed
  • OR perl-PerlMagick-6.4.3.6-7.45.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND libXcursor-devel-1.1.14-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND accountsservice-devel-0.6.35-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND aaa_base-malloccheck-13.2+git20140911.61c1681-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-150.35 is installed
  • OR kernel-default-extra-4.12.14-150.35 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND enigmail-2.0.11-3.16 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND Package Information
  • irssi-0.8.20-9 is installed
  • OR irssi-devel-0.8.20-9 is installed
  • BACK