RHBA-2009:0070 - Bug Fix Advisory

Topic

An updated util-linux package that fixes multiple bugs is now available.

Description

The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function. Among
others, util-linux contains the fdisk configuration tool and the login
program.

This update fixes the following bugs:

• The login command segmentation fault on EOF.
• The script command does not log all commands to the typescript file.
• Obsolete information in the mkfs man page.
• Obsolete information about fstab-sync in the fstab man page.
• Obsolete information in the fdisk man page.
• The blockdev command calls the blkpg ioctl with a wrong data structure.
• The mount command does not check for validity of mtab information.
• The mkswap defaults to v0 format on ppc64.
• The fdisk command does not warn about DOS partition table limitations on

on large hard drives.

• The fdisk command does not properly detect VMware partitions.
• The sfdisk command does not work correctly with large hard drives.
• The logger command cannot be used when /usr is non-root partition.
• The audit log injection attack via the login command.
• The swapon command with the "-a" option does not complain about missing

devices.

Users of util-linux are advised to upgrade to this updated package, which
resolves these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 249438 - man fstab refers to fstab-sync
• BZ - 427183 - In repair mode, mount gives false information
• BZ - 446648 - Obsolete info in fdisk(8) man page
• BZ - 447265 - RHEL5: VMware fdisk partitions
• BZ - 449777 - /usr/bin/logger cannot be used when /usr is non-root partition
• BZ - 456378 - RHEL5: audit log injection attack via login

CVEs

• CVE-2008-1926

References

(none)