Red Hat Security AdvisoryRHSA-2011:1691
util-linux-ng security, bug fix, and enhancement update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libblkid-2.17.2-12.4.el6, libuuid-2.17.2-12.4.el6, util-linux-ng-2.17.2-12.4.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libblkid-devel-2.17.2-12.4.el6, libuuid-devel-2.17.2-12.4.el6, util-linux-ng-2.17.2-12.4.el6
- Red Hat Enterprise Linux HPC Node (v. 6) libblkid-2.17.2-12.4.el6, libuuid-2.17.2-12.4.el6, util-linux-ng-2.17.2-12.4.el6 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libblkid-devel-2.17.2-12.4.el6, libuuid-devel-2.17.2-12.4.el6, util-linux-ng-2.17.2-12.4.el6
- Red Hat Enterprise Linux Server (v. 6) libblkid-2.17.2-12.4.el6, libblkid-2.17.2-12.4.el6.ppc, libblkid-devel-2.17.2-12.4.el6 +8
- Red Hat Enterprise Linux Workstation (v. 6) libblkid-2.17.2-12.4.el6, libblkid-devel-2.17.2-12.4.el6, libuuid-2.17.2-12.4.el6 +3
Fixes 2 records
Priority LOW 22
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00449 · Published 2011-04-10 · Partial fix
Priority LOW 16
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00404 · Published 2011-04-10 · Partial fix CWE-399
