]> git.ipfire.org Git - thirdparty/util-linux.git/commitdiff
docs: add v2.37.3-ReleaseNotes
authorKarel Zak <kzak@redhat.com>
Mon, 24 Jan 2022 09:08:27 +0000 (10:08 +0100)
committerKarel Zak <kzak@redhat.com>
Mon, 24 Jan 2022 09:08:27 +0000 (10:08 +0100)
Signed-off-by: Karel Zak <kzak@redhat.com>
Documentation/releases/v2.37.3-ReleaseNotes [new file with mode: 0644]

diff --git a/Documentation/releases/v2.37.3-ReleaseNotes b/Documentation/releases/v2.37.3-ReleaseNotes
new file mode 100644 (file)
index 0000000..f0dde28
--- /dev/null
@@ -0,0 +1,13 @@
+util-linux 2.37.3 Release Notes
+===============================
+
+This release fixes two security mount(8) and umount(8) issues:
+
+CVE-2021-3996
+    Improper UID check in libmount allows an unprivileged user to unmount FUSE
+    filesystems of users with similar UID.
+
+CVE-2021-3995
+    This issue is related to parsing the /proc/self/mountinfo file allows an
+    unprivileged user to unmount other user's filesystems that are either
+    world-writable themselves or mounted in a world-writable directory.