-
util-linux (2.36.1-8ubuntu2.2) impish-security; urgency=medium
* SECURITY UPDATE: Unauthorized unmount of FUSE filesystems belonging to
users with similar uid
- debian/patches/upstream/CVE-2021-3995-1.patch: make sure mem2strcpy()
buffer is zeroized in include/strutils.h.
- debian/patches/upstream/CVE-2021-3995-2.patch: fix UID check for FUSE
umount in libmount/src/context_umount.c, libmount/src/mountP.h,
libmount/src/optstr.c.
- CVE-2021-3995
* SECURITY UPDATE: Unauthorized unmount in util-linux's libmount
- debian/patches/upstream/CVE-2021-3996-1.patch: remove support for
deleted mount table entries in libmount/src/tab_parse.c.
- debian/patches/upstream/CVE-2021-3996-2.patch: update mountinfo files
in tests/*.
- CVE-2021-3996
-- Marc Deslauriers <email address hidden> Mon, 07 Feb 2022 08:29:30 -0500
-
util-linux (2.36.1-8ubuntu2) impish; urgency=medium
* Fix HiFive partition names (LP: #1944741)
- include: Rename HiFive partition UUIDs
- po: Update translations after changes to HiFive partition names
-- Alexandre Ghiti <email address hidden> Thu, 23 Sep 2021 16:07:01 +0200
-
util-linux (2.36.1-8ubuntu1) impish; urgency=medium
* Merge from Debian unstable. Remaining changes:
- Build hwclock with audit support.
- Drop debian/hwclock.rules and debian/util-linux.hwclock.default, recent
kernels sync the RTC automatically.
- Add sulogin-fallback-static-sh.patch: Add support for /bin/static-sh as
fallback if the regular shell fails to execute. Patch ported from
sysvinit. (see LP #505887)
- Add sulogin-lockedpwd.patch: Make sure file systems can be fixed on
machines with locked root accounts (as Ubuntu does by default). Don't
require --force for sulogin.
- Clean up weekly fstrim cron file, now a systemd timer unit.
- Allow to build without udeb packages.
-- Michael Hudson-Doyle <email address hidden> Thu, 12 Aug 2021 09:43:10 +1200
-
util-linux (2.36.1-7ubuntu2) hirsute; urgency=medium
* Allow to build without udeb packages.
-- Matthias Klose <email address hidden> Fri, 26 Feb 2021 08:18:04 +0100
