Synopsis

util-linux bug-fix update

Type/Severity

Bug Fix Advisory

Topic

An updated util-linux package that fixes multiple bugs is now available.

Description

The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function. Among
others, util-linux contains the fdisk configuration tool and the login
program.

This update fixes the following bugs:

• The login command segmentation fault on EOF.
  
• The script command does not log all commands to the typescript file.
  
• Obsolete information in the mkfs man page.
  
• Obsolete information about fstab-sync in the fstab man page.
  
• Obsolete information in the fdisk man page.
  
• The blockdev command calls the blkpg ioctl with a wrong data structure.
  
• The mount command does not check for validity of mtab information.
  
• The mkswap defaults to v0 format on ppc64.
  
• The fdisk command does not warn about DOS partition table limitations on
  on large hard drives.
  
• The fdisk command does not properly detect VMware partitions.
  
• The sfdisk command does not work correctly with large hard drives.
  
• The logger command cannot be used when /usr is non-root partition.
  
• The audit log injection attack via the login command.
  
• The swapon command with the "-a" option does not complain about missing
  devices.
  

Users of util-linux are advised to upgrade to this updated package, which
resolves these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 249438 - man fstab refers to fstab-sync
• BZ - 427183 - In repair mode, mount gives false information
• BZ - 446648 - Obsolete info in fdisk(8) man page
• BZ - 447265 - RHEL5: VMware fdisk partitions
• BZ - 449777 - /usr/bin/logger cannot be used when /usr is non-root partition
• BZ - 456378 - RHEL5: audit log injection attack via login

CVEs

• CVE-2008-1926

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
x86_64
util-linux-2.13-0.50.el5.x86_64.rpm	SHA-256: d3722a6df70c73f237bd3e551b8c681a9e65975c748bb17b69a60c8c56c87f90
ia64
util-linux-2.13-0.50.el5.ia64.rpm	SHA-256: 991749eb9bb175bad7e733c005f6a1af15129957e133b31a7b0f0296ba8b93a3
i386
util-linux-2.13-0.50.el5.i386.rpm	SHA-256: 6477942238cac2f8d9b64ecd7f4c3cd0e7127e5c6cbbaa315457288cbb7778bf

Red Hat Enterprise Linux Workstation 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
x86_64
util-linux-2.13-0.50.el5.x86_64.rpm	SHA-256: d3722a6df70c73f237bd3e551b8c681a9e65975c748bb17b69a60c8c56c87f90
i386
util-linux-2.13-0.50.el5.i386.rpm	SHA-256: 6477942238cac2f8d9b64ecd7f4c3cd0e7127e5c6cbbaa315457288cbb7778bf

Red Hat Enterprise Linux Desktop 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
x86_64
util-linux-2.13-0.50.el5.x86_64.rpm	SHA-256: d3722a6df70c73f237bd3e551b8c681a9e65975c748bb17b69a60c8c56c87f90
i386
util-linux-2.13-0.50.el5.i386.rpm	SHA-256: 6477942238cac2f8d9b64ecd7f4c3cd0e7127e5c6cbbaa315457288cbb7778bf

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
s390x
util-linux-2.13-0.50.el5.s390x.rpm	SHA-256: 0c8ab8c09c9a354f028900e14a867d8fbee4abd92ae24b16bbb3dcc05e236561

Red Hat Enterprise Linux for Power, big endian 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
ppc
util-linux-2.13-0.50.el5.ppc.rpm	SHA-256: df1b5dff3de0892c7d161f81e378fc6a756b906cee27ae9d0e2ff0f070bd7dbe

Red Hat Enterprise Linux Server from RHUI 5

SRPM
util-linux-2.13-0.50.el5.src.rpm	SHA-256: 4a4777251b62aed5bea1a23e8c5ec9dee1352497ac0176b6048116b6620cbf4b
x86_64
util-linux-2.13-0.50.el5.x86_64.rpm	SHA-256: d3722a6df70c73f237bd3e551b8c681a9e65975c748bb17b69a60c8c56c87f90
i386
util-linux-2.13-0.50.el5.i386.rpm	SHA-256: 6477942238cac2f8d9b64ecd7f4c3cd0e7127e5c6cbbaa315457288cbb7778bf