util-linux: Multiple vulnerabilities — GLSA 201405-15

Multiple vulnerabilities have been found in util-linux, the worst of which may lead to Denial of Service.

Affected packages

sys-apps/util-linux on all architectures
Affected versions < 2.22.2
Unaffected versions >= 2.22.2

Background

util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.

Description

Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.

Impact

A local attacker may be able to cause a Denial of Service condition, trigger corruption of /etc/mtab, obtain sensitive information, or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All util-linux users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.22.2"
 

References

Release date
May 18, 2014

Latest revision
May 18, 2014: 1

Severity
normal

Exploitable
local

Bugzilla entries