PT-2019-20101 · Util Linux+1 · Util-Linux+1

Published 2019-09-24 · Updated 2019-09-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions util-linux (affected versions not specified) shadow (affected versions not specified)

Description The issue concerns problems with PATH settings in /etc/default/su being ignored and outdated pam files. Additionally, there are issues with reading login.defs values, and problems with agetty's response to special characters. The update also includes hardening for su wrappers and recognition of more pseudofs and netfs to prevent incorrect behavior.

Recommendations For util-linux, update to a version that includes the fixes for the mentioned issues. For shadow, update to a version that includes the fixes for the mentioned issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

OPENSUSE-SU-2019:2175-1

Affected Products

Shadow

Util-Linux

References · 12

• https://osv.dev/vulnerability/openSUSE-SU-2019:2175-1 · Vendor Advisory
• https://lists.opensuse.org/archives/list/[e-mail]/thread/KR6XAIJCCU2HEVN7MXPNJNSES7DCPX52/#KR6XAIJCCU2HEVN7MXPNJNSES7DCPX52 · Note
• https://bugzilla.suse.com/353876 · Note
• https://bugzilla.suse.com/1082293 · Note
• https://bugzilla.suse.com/1121197 · Note
• https://bugzilla.suse.com/1106214 · Note
• https://bugzilla.suse.com/1135708 · Note
• https://bugzilla.suse.com/1125886 · Note
• https://bugzilla.suse.com/1135534 · Note
• https://bugzilla.suse.com/1122417 · Note
• https://bugzilla.suse.com/1081947 · Note
• https://bugzilla.suse.com/1085196 · Note