Skip to content
OpenAdvisories
Unscored SUSE-RU-2016:1515-1 1 CVE

Recommended update for bash-completion, util-linux

Published Jun 7, 2016 · Updated Feb 4, 2026

Summary

This update provides fixes and enhancements to bash-completion and util-linux.

bash-completion:

- Improve completion of LVM commands. (bsc#946875)
- Fix completion with backticks. (bsc#940835)
- Make ls completion smarter. (bsc#889319)
- Avoid negative cword position counter. (bsc#922758)
- Avoid trouble if restricted characters of the shell (e.g. exclamation mark) are used
in PS1. (bsc#903362)
- Expand variables whose value is a directory to avoid escaped dollar sign. (bsc#905348)
- Remove completions conflicting with util-linux. (bsc#977259)
- Improve handling of sub commands which will be expanded by backticks. (bsc#963140)
- Fix completion within a directory even if local sub directories exist. (bsc#977336)
- Allow completions list. (bsc#958462)
- Improve handling of completions of which result in variables. (bsc#940837, bsc#959299)

util-linux:

- Reuse existing loop device to prevent possible data corruption when multiple -o loop
are used to mount a single file. (bsc#947494)
- Remove incorrect --with-bashcompletiondir that breaks bash-completion, use path in
bash-completion.pc instead. (bsc#977259)
- Fix blkid to wipe correct area for probes with offset. (bsc#976141)
- Fix and improve function of lscpu on Power Systems. (bsc#975082)
- Fix crash while evaluating root of btrfs. (bsc#972684)
- Make sulogin call tcfinal unconditionally. (bsc#970404)
- Fixing 'mount -a' for loop devices. (bsc#947494)
- Prevent 'mount -a' from mounting btrfs volumes multiple times. (bsc#947494)
- Add support for locked root accounts in sulogin. (bsc#963399)
- Remove Persistent= directive from fstrim for systemd versions older than 212.
(bsc#956540, bsc#953691, bsc#954482)
- Prevent colcrt buffer overflow. (bsc#949754, CVE-2015-5218)
- Do not segfault when TERM is not defined or wrong. (bsc#903440)
- Fix fsck -C {fd} parsing. (bsc#923777, bsc#903738)
- Add patches to fix lsblk output in some situations. (bsc#943415, bsc#950778)
- Fix mount point lookup (and mount -a) if the path contains //. (bsc#931955)
- Follow multipath-tools partition names configuration. (bsc#880468)
- Fix recognition of /dev/dm-N partitions names. (bsc#880468)
- Fix lsblk -f and fdisk -l on devices with nodes in /dev subdirectory. (bsc#924994)

Fixed packages 17

ReleasePackageFixed in
SUSE · SLES 12 Linux Enterprise Desktop 12 bash-completion 2.1-8.1
SUSE · SLES 12 Linux Enterprise Desktop 12 python-libmount 2.25-24.3.3
SUSE · SLES 12 Linux Enterprise Desktop 12 util-linux 2.25-24.3.2
SUSE · SLES 12 Linux Enterprise Desktop 12 util-linux-systemd 2.25-24.3.1
SUSE · SLES 12 SP1 Linux Enterprise Desktop 12 SP1 bash-completion 2.1-8.1
SUSE · SLES 12 Linux Enterprise Server 12 bash-completion 2.1-8.1
SUSE · SLES 12 Linux Enterprise Server 12 python-libmount 2.25-24.3.3
SUSE · SLES 12 Linux Enterprise Server 12 util-linux 2.25-24.3.2
SUSE · SLES 12 Linux Enterprise Server 12 util-linux-systemd 2.25-24.3.1
SUSE · SLES 12 SP1 Linux Enterprise Server 12 SP1 bash-completion 2.1-8.1
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 bash-completion 2.1-8.1
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 python-libmount 2.25-24.3.3
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 util-linux 2.25-24.3.2
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 util-linux-systemd 2.25-24.3.1
SUSE · SLES for SAP 12 SP1 Linux Enterprise Server for SAP Applications 12 SP1 bash-completion 2.1-8.1
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 util-linux 2.25-24.3.2
SUSE · SLES 12 Linux Enterprise Workstation Extension 12 util-linux 2.25-24.3.2

Vulnerabilities 1

  • Unscored —

    Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of serv…

References

  • report
    https://bugzilla.suse.com/880468
  • report
    https://bugzilla.suse.com/889319
  • report
    https://bugzilla.suse.com/903362
  • report
    https://bugzilla.suse.com/903440
  • report
    https://bugzilla.suse.com/903738
  • report
    https://bugzilla.suse.com/905348
  • report
    https://bugzilla.suse.com/922758
  • report
    https://bugzilla.suse.com/923777
  • report
    https://bugzilla.suse.com/924994
  • report
    https://bugzilla.suse.com/931955
  • report
    https://bugzilla.suse.com/940835
  • report
    https://bugzilla.suse.com/940837
  • report
    https://bugzilla.suse.com/943415
  • report
    https://bugzilla.suse.com/946875
  • report
    https://bugzilla.suse.com/947494
  • report
    https://bugzilla.suse.com/949754
  • report
    https://bugzilla.suse.com/950778
  • report
    https://bugzilla.suse.com/953691
  • report
    https://bugzilla.suse.com/954482
  • report
    https://bugzilla.suse.com/956540
  • report
    https://bugzilla.suse.com/958462
  • report
    https://bugzilla.suse.com/959299
  • report
    https://bugzilla.suse.com/963140
  • report
    https://bugzilla.suse.com/963399
  • report
    https://bugzilla.suse.com/970404
  • report
    https://bugzilla.suse.com/972684
  • report
    https://bugzilla.suse.com/975082
  • report
    https://bugzilla.suse.com/976141
  • report
    https://bugzilla.suse.com/977259
  • report
    https://bugzilla.suse.com/977336
  • web
    https://www.suse.com/security/cve/CVE-2015-5218