The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade lastlog2Upgrade liblastlog2-develUpgrade util-linuxUpgrade libblkid1-32bitUpgrade libsmartcols1Upgrade python-libmountUpgrade libmount-devel-32bitUpgrade libsmartcols-devel-32bitUpgrade libblkid-devel-32bitUpgrade libuuid-develUpgrade libuuid-devel-32bitUpgrade libblkid1Upgrade util-linux-tty-toolsUpgrade libsmartcols1-32bitUpgrade python313-libmountUpgrade libmount-devel-staticUpgrade util-linux-extraUpgrade uuiddUpgrade libfdisk-devel-staticUpgrade liblastlog2-2Upgrade libsmartcols-devel-staticUpgrade libfdisk-devel-32bitUpgrade libmount1-32bitUpgrade libfdisk1Upgrade util-linux-langUpgrade libuuid-devel-staticUpgrade libsmartcols-develUpgrade libmount-develUpgrade libfdisk-develUpgrade libblkid-develUpgrade libuuid1Upgrade libblkid-devel-staticUpgrade libfdisk1-32bitUpgrade util-linux-systemdUpgrade libuuid1-32bitUpgrade python3-libmountUpgrade libmount1 | Mar 10, 2026 | Mar 4, 2026 |
| Ubuntu | — | Upgrade util-linux | Aug 31, 2026 | Apr 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 22, 2026 | Apr 3, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub