From bc1a59103e88d5a55dc0b8e95cee55db339f68d7 Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Tue, 25 Jan 2022 09:13:33 +0100 Subject: [PATCH] util-linux: Update version from 2.33 to 2.37.3 1. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.34/v2.34-ReleaseNotes 2. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes 3. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes 4. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes From [util-linux 2.37.3 Release Notes][1]: > This release fixes two security mount(8) and umount(8) issues: > > CVE-2021-3996 > Improper UID check in libmount allows an unprivileged user to unmount FUSE > filesystems of users with similar UID. > > CVE-2021-3995 > This issue is related to parsing the /proc/self/mountinfo file allows an > unprivileged user to unmount other user's filesystems that are either > world-writable themselves or mounted in a world-writable directory. [1]: https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.3-ReleaseNotes --- util-linux.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/util-linux.be0 b/util-linux.be0 index 7488a71e5..d4385017c 100755 --- a/util-linux.be0 +++ b/util-linux.be0 @@ -1,6 +1,6 @@ #!/usr/bin/env beesh -# BEE_VERSION util-linux-2.34-2 +# BEE_VERSION util-linux-2.37.3-0 SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION[2]}/util-linux-${PKGVERSION}.tar.xz"