SuSE 11.3 Security Update : util-linux (SAT Patch Number 10452)

high Nessus Plugin ID 82021

Synopsis

The remote SuSE 11 host is missing one or more security updates.

Description

util-linux has been updated to fix one security issue :

- command injection flaw in blkid (bnc#907434).
Additionally, these non-security issues have been fixed :. (CVE-2014-9114)

- Fix possible script hang. (bnc#888678)

- Enable build of libmount / findmnt. (bnc#900965)

- Don't stop trying filesystem when mounting fails with EACCESS. (bnc#918041)

- Fix possible loop in findmnt (bsc#917164)

- Recognize Unisys s-Par as hypervisor (FATE#318231)

- Include the utmpdump.1 manpage (bsc#901549).

Solution

Apply SAT patch number 10452.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=888678

https://bugzilla.novell.com/show_bug.cgi?id=900965

https://bugzilla.novell.com/show_bug.cgi?id=901549

https://bugzilla.novell.com/show_bug.cgi?id=907434

https://bugzilla.novell.com/show_bug.cgi?id=917164

https://bugzilla.novell.com/show_bug.cgi?id=918041

http://support.novell.com/security/cve/CVE-2014-9114.html

Plugin Details

Severity: High

ID: 82021

File Name: suse_11_libblkid-devel-150311.nasl

Version: 1.2

Type: local

Agent: unix

Published: 3/24/2015

Updated: 1/6/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:libblkid1, p-cpe:/a:novell:suse_linux:11:libblkid1-32bit, p-cpe:/a:novell:suse_linux:11:libuuid-devel, p-cpe:/a:novell:suse_linux:11:libuuid1, p-cpe:/a:novell:suse_linux:11:libuuid1-32bit, p-cpe:/a:novell:suse_linux:11:util-linux, p-cpe:/a:novell:suse_linux:11:util-linux-lang, p-cpe:/a:novell:suse_linux:11:uuid-runtime, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 3/11/2015

Reference Information

CVE: CVE-2014-9114