util-linux: Multiple Vulnerabilities — GLSA 202401-08

Multiple vulnerabilities have been discovered in util-linux which can lead to denial of service or information disclosure.

Affected packages

sys-apps/util-linux on all architectures
Affected versions < 2.37.4
Unaffected versions >= 2.37.4

Background

util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.

Description

Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All util-linux users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.37.4"
 

References

Release date
January 07, 2024

Latest revision
January 07, 2024: 1

Severity
normal

Exploitable
remote

Bugzilla entries