OESA-2022-1536

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1536
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1536.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2022-1536
Upstream
Published
2022-02-26T11:03:33Z
Modified
2025-09-03T06:17:37.221851Z
Summary
util-linux security update
Details

The util-linux package contains a random collection of files that implements some low-level basic linux utilities.

Security Fix(es):

A logical error was found in util-linux's libmount library in a function that allows unprivileged users to unmount FUSE filesystems. Incorrect uid checking allows unprivileged users to unmount FUSE filesystems with similar uid users, an attacker could exploit this vulnerability to cause a denial of service to applications using the affected filesystem.(CVE-2021-3995)

that allows unprivileged users to unmount FUSE filesystems. Issues related to parsing the /proc/self/mountinfo file allow unprivileged users to unmount other users' filesystems that are themselves world-writable (such as /tmp) or mounted in a world-writable directory. An attacker could exploit this vulnerability to cause a denial of service to applications that use the affected file system.(CVE-2021-3996)

Database specific
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / util-linux

Package

Name
util-linux
Purl
pkg:rpm/openEuler/util-linux&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.35.2-10.oe1

Ecosystem specific

{
    "aarch64": [
        "libblkid-2.35.2-10.oe1.aarch64.rpm",
        "python-libmount-2.35.2-10.oe1.aarch64.rpm",
        "libuuid-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-2.35.2-10.oe1.aarch64.rpm",
        "libmount-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-devel-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-debuginfo-2.35.2-10.oe1.aarch64.rpm",
        "uuidd-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-debugsource-2.35.2-10.oe1.aarch64.rpm",
        "libsmartcols-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-user-2.35.2-10.oe1.aarch64.rpm",
        "libfdisk-2.35.2-10.oe1.aarch64.rpm"
    ],
    "src": [
        "util-linux-2.35.2-10.oe1.src.rpm"
    ],
    "noarch": [
        "util-linux-help-2.35.2-10.oe1.noarch.rpm"
    ],
    "x86_64": [
        "util-linux-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-devel-2.35.2-10.oe1.x86_64.rpm",
        "libfdisk-2.35.2-10.oe1.x86_64.rpm",
        "libsmartcols-2.35.2-10.oe1.x86_64.rpm",
        "libuuid-2.35.2-10.oe1.x86_64.rpm",
        "libmount-2.35.2-10.oe1.x86_64.rpm",
        "libblkid-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-debugsource-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-debuginfo-2.35.2-10.oe1.x86_64.rpm",
        "uuidd-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-user-2.35.2-10.oe1.x86_64.rpm",
        "python-libmount-2.35.2-10.oe1.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / util-linux

Package

Name
util-linux
Purl
pkg:rpm/openEuler/util-linux&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.35.2-9.oe1

Ecosystem specific

{
    "aarch64": [
        "libfdisk-2.35.2-9.oe1.aarch64.rpm",
        "python-libmount-2.35.2-9.oe1.aarch64.rpm",
        "libblkid-2.35.2-9.oe1.aarch64.rpm",
        "util-linux-debugsource-2.35.2-9.oe1.aarch64.rpm",
        "libuuid-2.35.2-9.oe1.aarch64.rpm",
        "libmount-2.35.2-9.oe1.aarch64.rpm",
        "uuidd-2.35.2-9.oe1.aarch64.rpm",
        "util-linux-devel-2.35.2-9.oe1.aarch64.rpm",
        "util-linux-user-2.35.2-9.oe1.aarch64.rpm",
        "libsmartcols-2.35.2-9.oe1.aarch64.rpm",
        "util-linux-2.35.2-9.oe1.aarch64.rpm",
        "util-linux-debuginfo-2.35.2-9.oe1.aarch64.rpm"
    ],
    "src": [
        "util-linux-2.35.2-9.oe1.src.rpm"
    ],
    "noarch": [
        "util-linux-help-2.35.2-9.oe1.noarch.rpm"
    ],
    "x86_64": [
        "libuuid-2.35.2-9.oe1.x86_64.rpm",
        "util-linux-devel-2.35.2-9.oe1.x86_64.rpm",
        "util-linux-2.35.2-9.oe1.x86_64.rpm",
        "libblkid-2.35.2-9.oe1.x86_64.rpm",
        "python-libmount-2.35.2-9.oe1.x86_64.rpm",
        "util-linux-debugsource-2.35.2-9.oe1.x86_64.rpm",
        "uuidd-2.35.2-9.oe1.x86_64.rpm",
        "libsmartcols-2.35.2-9.oe1.x86_64.rpm",
        "util-linux-user-2.35.2-9.oe1.x86_64.rpm",
        "libmount-2.35.2-9.oe1.x86_64.rpm",
        "util-linux-debuginfo-2.35.2-9.oe1.x86_64.rpm",
        "libfdisk-2.35.2-9.oe1.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / util-linux

Package

Name
util-linux
Purl
pkg:rpm/openEuler/util-linux&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.35.2-10.oe1

Ecosystem specific

{
    "aarch64": [
        "util-linux-user-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-debuginfo-2.35.2-10.oe1.aarch64.rpm",
        "libsmartcols-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-debugsource-2.35.2-10.oe1.aarch64.rpm",
        "libfdisk-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-2.35.2-10.oe1.aarch64.rpm",
        "libmount-2.35.2-10.oe1.aarch64.rpm",
        "python-libmount-2.35.2-10.oe1.aarch64.rpm",
        "libblkid-2.35.2-10.oe1.aarch64.rpm",
        "libuuid-2.35.2-10.oe1.aarch64.rpm",
        "uuidd-2.35.2-10.oe1.aarch64.rpm",
        "util-linux-devel-2.35.2-10.oe1.aarch64.rpm"
    ],
    "src": [
        "util-linux-2.35.2-10.oe1.src.rpm"
    ],
    "noarch": [
        "util-linux-help-2.35.2-10.oe1.noarch.rpm"
    ],
    "x86_64": [
        "util-linux-debuginfo-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-user-2.35.2-10.oe1.x86_64.rpm",
        "uuidd-2.35.2-10.oe1.x86_64.rpm",
        "libuuid-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-debugsource-2.35.2-10.oe1.x86_64.rpm",
        "libsmartcols-2.35.2-10.oe1.x86_64.rpm",
        "python-libmount-2.35.2-10.oe1.x86_64.rpm",
        "libblkid-2.35.2-10.oe1.x86_64.rpm",
        "util-linux-devel-2.35.2-10.oe1.x86_64.rpm",
        "libmount-2.35.2-10.oe1.x86_64.rpm",
        "libfdisk-2.35.2-10.oe1.x86_64.rpm"
    ]
}