libblkid, libmount, libuuid, util, uuidd security update

CentOS Errata and Security Advisory CESA-2017:0907

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.

Security Fix(es):

• A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. (CVE-2017-2616)

Red Hat would like to thank Tobias Stöckmann for reporting this issue.

Bug Fix(es):

• The “findmnt --target <path>” command prints all file systems where the mount point directory is <path>. Previously, when used in the chroot environment, “findmnt --target <path>” incorrectly displayed all mount points. The command has been fixed so that it now checks the mount point path and returns information only for the relevant mount point. (BZ#1414481)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2017-April/084538.html

Affected packages:
libblkid
libblkid-devel
libmount
libmount-devel
libuuid
libuuid-devel
util-linux
uuidd

Upstream details at:
https://access.redhat.com/errata/RHSA-2017:0907