]> git.ipfire.org Git - thirdparty/util-linux.git/commit
libmount: fix UID check for FUSE umount [CVE-2021-3995]
authorKarel Zak <kzak@redhat.com>
Wed, 24 Nov 2021 12:53:25 +0000 (13:53 +0100)
committerKarel Zak <kzak@redhat.com>
Mon, 24 Jan 2022 08:49:16 +0000 (09:49 +0100)
commitf3db9bd609494099f0c1b95231c5dfe383346929
treed7f11c8daed703203f1968d91672b78674716b53
parentf59c8fd38dfee24b93ed54a6984f879499c34ec7
libmount: fix UID check for FUSE umount [CVE-2021-3995]

Improper UID check allows an unprivileged user to unmount FUSE
filesystems of users with similar UID.

Signed-off-by: Karel Zak <kzak@redhat.com>
include/strutils.h
libmount/src/context_umount.c
libmount/src/mountP.h
libmount/src/optstr.c