Summary
[2.32.1-48.0.1]
- Orabug 35995159 - report lost loop device
[2.32.1-48]
- fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libblkid | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libblkid-devel | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libfdisk | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libfdisk-devel | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libmount | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libmount-devel | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libsmartcols | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libsmartcols-devel | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libuuid | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | libuuid-devel | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | python3-libmount | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | util-linux | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | util-linux-user | 0:2.32.1-48.0.1.el8_10 |
| Oracle Linux · 8 | uuidd | 0:2.32.1-48.0.1.el8_10 |
Vulnerabilities 1
-
Medium 6.1
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.