Secunia

A weakness has been reported in util-linux-ng, which can be exploited by malicious people to manipulate certain data.

The security issue is caused due to an error in login.c while logging login attempts. This can be exploited to inject e.g. an arbitrary address in the audit logs via a specially crafted username.

The weakness is reported in versions prior to 2.13.1.1.

Solution
Update to version 2.13.1.1.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.13/v2.13.1.1-ChangeLog
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=8ccf0b253ac0f4f58d64bc9674de18bff5a88782

Deep Links
Links available in Customer Area