SUSE-SU-2026:1406-1

Details

This update for util-linux fixes the following issues:

Security issue:

CVE-2026-3184: access control bypass due to improper hostname canonicalization in login (bsc#1258859).

Non security issues:

recognize fuse 'portal' as a virtual file system (bsc#1234736).
fdisk: fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465).

Affected Packages(21 packages)

libblkid-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libblkid-devel-static

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libblkid1

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libblkid1-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libfdisk-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libfdisk1

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libmount-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libmount1

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libmount1-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

libsmartcols-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

2.40.4-150700.4.10.1

References

REPORT

https://bugzilla.suse.com/1222465

REPORT

https://bugzilla.suse.com/1234736

REPORT

https://bugzilla.suse.com/1258859

WEB

https://www.suse.com/security/cve/CVE-2026-3184

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261406-1/