multipath-tools: Multiple Vulnerabilities — GLSA 202311-06

Multiple vulnerabilities have been discovered in multipath-tools, the worst of which can lead to root privilege escalation.

Package	sys-fs/multipath-tools on all architectures
Affected versions	< 0.9.3
Unaffected versions	>= 0.9.3

multipath-tools are used to drive the Device Mapper multipathing driver.

Multiple vulnerabilities have been discovered in multipath-tools. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All multipath-tools users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-fs/multipath-tools-0.9.3"

Release date
November 25, 2023

Latest revision
November 25, 2023: 1

Severity
high

Exploitable
local

Bugzilla entries