Synopsis: Low: util-linux security, bug fix, and enhancement update
Advisory ID: SLSA-2016:2605-2
Issue Date: 2016-11-03
CVE Numbers: CVE-2016-5011
—
Security Fix(es):
* It was found that util-linux’s libblkid library did not properly handle
Extended Boot Record (EBR) partitions when reading MS-DOS partition
tables. An attacker with physical USB access to a protected machine could
insert a storage device with a specially crafted partition table that
could, for example, trigger an infinite loop in systemd-udevd, resulting
in a denial of service on that machine. (CVE-2016-5011)
Additional Changes:
—
SL7
x86_64
libblkid-2.23.2-33.el7.i686.rpm
libblkid-2.23.2-33.el7.x86_64.rpm
libmount-2.23.2-33.el7.i686.rpm
libmount-2.23.2-33.el7.x86_64.rpm
libuuid-2.23.2-33.el7.i686.rpm
libuuid-2.23.2-33.el7.x86_64.rpm
util-linux-2.23.2-33.el7.x86_64.rpm
util-linux-debuginfo-2.23.2-33.el7.i686.rpm
util-linux-debuginfo-2.23.2-33.el7.x86_64.rpm
uuidd-2.23.2-33.el7.x86_64.rpm
libblkid-devel-2.23.2-33.el7.i686.rpm
libblkid-devel-2.23.2-33.el7.x86_64.rpm
libmount-devel-2.23.2-33.el7.i686.rpm
libmount-devel-2.23.2-33.el7.x86_64.rpm
libuuid-devel-2.23.2-33.el7.i686.rpm
libuuid-devel-2.23.2-33.el7.x86_64.rpm
util-linux-2.23.2-33.el7.i686.rpm
– Scientific Linux Development Team
