From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 19 Jun 2026 09:48:05 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1waTxN-007Wuh-0r for lore@lore.pengutronix.de; Fri, 19 Jun 2026 09:48:05 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1waTxN-0001X9-2i; Fri, 19 Jun 2026 09:48:05 +0200 Received: from mail.thorsis.com ([217.92.40.78]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1waTx4-0000ox-63 for ptxdist@pengutronix.de; Fri, 19 Jun 2026 09:47:46 +0200 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id A2671148E098; Fri, 19 Jun 2026 09:47:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1781855277; h=from:subject:date:message-id:to:cc:mime-version: content-transfer-encoding:in-reply-to:references; bh=W/JT9BKqGD4UYUSYbTFsYmGMrisFCbsVRmUptwRkssI=; b=DwzCw++wrBV5AacJscyIPBb7WzUy08s/uLuWEgX6URWnCL35X0SrshZBvPsR3oIZ66N4qk /6aCWFIFuezjuoHqOUgGTU/ld1rcAETLSyrIn0vZb6j9yv7MuVI6GylqO141Lv6G95/ft8 kOHlZ5xJeSZ+thnprb1i4PV5TrwZIKnWibTlEerC2jDEGoz1XNbmeui8myOjXXWEdNPxI6 hqdpWRjZKgAUw+6SYCKxOKrAAs2SpWebhjDKEtg7pE3ceiVCC5rQOEvmNgTEqx9wtuKntV wdw2QqdIQDWtV1d+EpzTw4Wa7HXSxUtShAAbc0qMa00LSk7vPCeps8NVvftVUA== To: ptxdist@pengutronix.de Date: Fri, 19 Jun 2026 09:47:44 +0200 Message-ID: <20260619074744.1129667-3-ada@thorsis.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260619074744.1129667-1-ada@thorsis.com> References: <20260619074744.1129667-1-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 2/2] util-linux: version bump 2.42.1 -> 2.42.2 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl , Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Security fixes: CVE-2026-53613 - mount(8) TOCTOU race on target path. CVE-2026-53612 - mount(8) TOCTOU race on post-mount owner/mode change. CVE-2026-53614 - mount(8) SUID bypass via LIBMOUNT_FORCE_MOUNT2. CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop device (follow-up). libblkid: use-after-free in nested partition probing. Link: https://www.kernel.org/pub/linux/utils/util-linux/v2.42/v2.42.2-ReleaseNotes Signed-off-by: Alexander Dahl --- rules/util-linux.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/util-linux.make b/rules/util-linux.make index bf6817c2a..33e525820 100644 --- a/rules/util-linux.make +++ b/rules/util-linux.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_UTIL_LINUX) += util-linux # # Paths and names # -UTIL_LINUX_VERSION := 2.42.1 -UTIL_LINUX_SHA256 := 82e9158eb12a9b0b569d84e1687fed9dd18fe89ccd8ef5ac3427218a7c0d7f7f +UTIL_LINUX_VERSION := 2.42.2 +UTIL_LINUX_SHA256 := 03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a UTIL_LINUX := util-linux-$(UTIL_LINUX_VERSION) UTIL_LINUX_SUFFIX := tar.xz UTIL_LINUX_BASENAME := v$(if $(filter 2,$(basename $(UTIL_LINUX_VERSION))),$(UTIL_LINUX_VERSION),$(basename $(UTIL_LINUX_VERSION))) -- 2.47.3