util-linux: Multiple vulnerabilities

Background

util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.

Description

Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.

Impact

A local attacker may be able to cause a Denial of Service condition, trigger corruption of /etc/mtab, obtain sensitive information, or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All util-linux users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.22.2"