--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2005-168326 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168326 2005-11-19 --------------------------------------------------------------------- Name : util-linux and mount Versions : rh73: util-linux-2.11n-12.7.3.2.legacy Versions : rh9: util-linux-2.11y-9.2.legacy Versions : fc1: util-linux-2.11y-29.2.legacy Versions : fc2: util-linux-2.12-19.1.legacy Summary : A collection of basic system utilities. Description : The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program. --------------------------------------------------------------------- Update Information: Updated util-linux and mount packages that fix a security issue are now available. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The mount package contains the mount, umount, swapon and swapoff programs. A bug was found in the way the umount command is executed by normal users. It may be possible for a user to gain elevated privileges if the user is able to execute the "umount -r" command on a mounted file system. The file system will be re-mounted only with the "readonly" flag set, clearing flags such as "nosuid" and "noexec". The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2876 to this issue. All users of util-linux and mount should upgrade to these updated packages, which contain a backported patch to correct this issue. --------------------------------------------------------------------- Changelogs rh73: * Thu Nov 17 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 2.11n-12.7.3.2.legacy - Added missing gettext BuildRequires * Tue Oct 11 2005 Jeff Sheltren <sheltren@xxxxxxxxxxx> 2.11n-12.7.3.1.legacy - Patch for CAN-2005-2876 (#168326) rh9: * Thu Nov 17 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 2.11y-9.2.legacy - Added missing gettext to BuildRequires * Tue Oct 11 2005 Jeff Sheltren <sheltren@xxxxxxxxxxx> 2.11y-9.1.legacy - Patch for CAN-2005-2876 (#168326) fc1: * Thu Nov 17 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 2.11y-29.2.legacy - Added missing gettext to BuildRequires * Tue Oct 11 2005 Jeff Sheltren <sheltren@xxxxxxxxxxx> 2.11y-29.1.legacy - Patch for CAN-2005-2876 (#168326) fc2: * Tue Oct 11 2005 Jeff Sheltren <sheltren@xxxxxxxxxxx> 2.12-19.1.legacy - Patch for CAN-2005-2876 (#168326) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) rh73: 437139c00fbc4109ea3cd66b88a778a023d07298 redhat/7.3/updates-testing/i386/mount-2.11n-12.7.3.2.legacy.i386.rpm e39b80b435a545f87878cb2d4f6e89d89ec2c88f redhat/7.3/updates-testing/i386/util-linux-2.11n-12.7.3.2.legacy.i386.rpm 0c671214cb28d21b71917d04e4cdce3240515b45 redhat/7.3/updates-testing/i386/losetup-2.11n-12.7.3.2.legacy.i386.rpm a35553671d54999b0929f42a1283252b1cab1d18 redhat/7.3/updates-testing/SRPMS/util-linux-2.11n-12.7.3.2.legacy.src.rpm rh9: cbe71d4ed7c39c0ed186a548c194c44e3328595b redhat/9/updates-testing/i386/mount-2.11y-9.2.legacy.i386.rpm 926ae6d1c9f6d5309ab24c712cbe2a3ec97bba1c redhat/9/updates-testing/i386/util-linux-2.11y-9.2.legacy.i386.rpm 969d19231dc24415f7d761539b59ba772c716a36 redhat/9/updates-testing/i386/losetup-2.11y-9.2.legacy.i386.rpm 9ac87483879c1df0ed9c100081e19b7614af8f79 redhat/9/updates-testing/SRPMS/util-linux-2.11y-9.2.legacy.src.rpm fc1: 881c066cf8ec3aa25450a7e8db2f43e55faaef40 fedora/1/updates-testing/i386/mount-2.11y-29.2.legacy.i386.rpm f1b2f60ee7b5fb3149ab3b36133c930c6eecb788 fedora/1/updates-testing/i386/util-linux-2.11y-29.2.legacy.i386.rpm 501380711d59e946f1dab5a40b0906525393d766 fedora/1/updates-testing/i386/losetup-2.11y-29.2.legacy.i386.rpm 65519afd06a882abad31b847ad7053936dfd0ef4 fedora/1/updates-testing/SRPMS/util-linux-2.11y-29.2.legacy.src.rpm fc2: 72c70f92397f84a3f021c6cef964fa0fb9b8cc57 fedora/2/updates-testing/i386/util-linux-2.12-19.1.legacy.i386.rpm 2c93eefe88d57118fc2ddfee7fd5949e3d58c38f fedora/2/updates-testing/SRPMS/util-linux-2.12-19.1.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-legacy-list
