Summary
[2.40.2-15]
- libblkid: use snprintf() instead of sprintf()
[2.40.2-14]
- Fix setpwnam() buffer use [CVE-2025-14104]
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libblkid | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libblkid-devel | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libfdisk | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libfdisk-devel | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libmount | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libmount-devel | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libsmartcols | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libsmartcols-devel | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libuuid | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | libuuid-devel | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | python3-libmount | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | util-linux | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | util-linux-core | 0:2.40.2-15.el10_1 |
| Oracle Linux · 10 | uuidd | 0:2.40.2-15.el10_1 |
Vulnerabilities 1
-
Medium 6.1
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.