Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
util-linux: Update version from 2.33 to 2.37.3
1. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.34/v2.34-ReleaseNotes 2. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes 3. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes 4. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes From [util-linux 2.37.3 Release Notes][1]: > This release fixes two security mount(8) and umount(8) issues: > > CVE-2021-3996 > Improper UID check in libmount allows an unprivileged user to unmount FUSE > filesystems of users with similar UID. > > CVE-2021-3995 > This issue is related to parsing the /proc/self/mountinfo file allows an > unprivileged user to unmount other user's filesystems that are either > world-writable themselves or mounted in a world-writable directory. [1]: https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.3-ReleaseNotes
- Loading branch information