Messages in this thread | | | Date | Mon, 24 Jan 2022 12:13:17 +0100 | From | Karel Zak <> | Subject | [ANNOUNCE] util-linux stable realase v2.37.3 |
| |
The util-linux release v2.37.3 is available at
http://www.kernel.org/pub/linux/utils/util-linux/v2.37/
Feedback and bug reports, as always, are welcomed.
Karel
util-linux 2.37.3 Release Notes ===============================
This release fixes two security mount(8) and umount(8) issues:
CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID.
CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory.
-- Karel Zak <kzak@redhat.com> http://karelzak.blogspot.com
| |