]> git.ipfire.org Git - thirdparty/util-linux.git/commit
libmount: fix (deleted) suffix issue [CVE-2021-3996]
authorKarel Zak <kzak@redhat.com>
Tue, 4 Jan 2022 09:54:20 +0000 (10:54 +0100)
committerKarel Zak <kzak@redhat.com>
Mon, 24 Jan 2022 08:49:16 +0000 (09:49 +0100)
commit018a10907fa9885093f6d87401556932c2d8bd2b
treef64744cb1074c8b1f375dd906bed8c243aa082cb
parentf3db9bd609494099f0c1b95231c5dfe383346929
libmount: fix (deleted) suffix issue [CVE-2021-3996]

This issue is related to parsing the /proc/self/mountinfo file allows an
unprivileged user to unmount other user's filesystems that are either
world-writable themselves or mounted in a world-writable directory.

The support for "(deleted)" is no more necessary as the Linux kernel does
not use it in /proc/self/mountinfo and /proc/self/mount files anymore.

Signed-off-by: Karel Zak <kzak@redhat.com>
16 files changed:
libmount/src/tab_parse.c
tests/expected/findmnt/filter-options
tests/expected/findmnt/filter-options-nameval-neg
tests/expected/findmnt/filter-types-neg
tests/expected/findmnt/outputs-default
tests/expected/findmnt/outputs-force-tree
tests/expected/findmnt/outputs-kernel
tests/expected/libmount/tabdiff-mount
tests/expected/libmount/tabdiff-move
tests/expected/libmount/tabdiff-remount
tests/expected/libmount/tabdiff-umount
tests/expected/libmount/tabfiles-parse-mountinfo
tests/expected/libmount/tabfiles-py-parse-mountinfo
tests/ts/findmnt/files/mountinfo
tests/ts/findmnt/files/mountinfo-nonroot
tests/ts/libmount/files/mountinfo