From: Michael Olbrich <m.olbrich@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Alexander Dahl <ada@thorsis.com>
Subject: Re: [ptxdist] [APPLIED] util-linux: version bump 2.42.1 -> 2.42.2
Date: Thu, 25 Jun 2026 21:23:32 +0200 [thread overview]
Message-ID: <20260625192332.832429-1-m.olbrich@pengutronix.de> (raw)
In-Reply-To: <20260619074744.1129667-3-ada@thorsis.com>
Thanks, applied as f7c655564f624a8ba4385496a4cbf8252a8b9b09.
Michael
[sent from post-receive hook]
On Thu, 25 Jun 2026 21:23:32 +0200, Alexander Dahl <ada@thorsis.com> wrote:
> Security fixes:
>
> CVE-2026-53613 - mount(8) TOCTOU race on target path.
> CVE-2026-53612 - mount(8) TOCTOU race on post-mount owner/mode change.
> CVE-2026-53614 - mount(8) SUID bypass via LIBMOUNT_FORCE_MOUNT2.
> CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop device (follow-up).
> libblkid: use-after-free in nested partition probing.
>
> Link: https://www.kernel.org/pub/linux/utils/util-linux/v2.42/v2.42.2-ReleaseNotes
> Signed-off-by: Alexander Dahl <ada@thorsis.com>
> Message-Id: <20260619074744.1129667-3-ada@thorsis.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
>
> diff --git a/rules/util-linux.make b/rules/util-linux.make
> index bf6817c2a565..33e5258209a2 100644
> --- a/rules/util-linux.make
> +++ b/rules/util-linux.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_UTIL_LINUX) += util-linux
> #
> # Paths and names
> #
> -UTIL_LINUX_VERSION := 2.42.1
> -UTIL_LINUX_SHA256 := 82e9158eb12a9b0b569d84e1687fed9dd18fe89ccd8ef5ac3427218a7c0d7f7f
> +UTIL_LINUX_VERSION := 2.42.2
> +UTIL_LINUX_SHA256 := 03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a
> UTIL_LINUX := util-linux-$(UTIL_LINUX_VERSION)
> UTIL_LINUX_SUFFIX := tar.xz
> UTIL_LINUX_BASENAME := v$(if $(filter 2,$(basename $(UTIL_LINUX_VERSION))),$(UTIL_LINUX_VERSION),$(basename $(UTIL_LINUX_VERSION)))
prev parent reply other threads:[~2026-06-25 19:23 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-06-19 7:47 [ptxdist] [PATCH 0/2] util-linux: Switch back to tarball download and version bump to 2.42.2 Alexander Dahl via ptxdist
2026-06-19 7:47 ` [ptxdist] [PATCH 1/2] util-linux: Switch back from git to tarball download Alexander Dahl via ptxdist
2026-06-25 19:23 ` [ptxdist] [APPLIED] " Michael Olbrich
2026-06-19 7:47 ` [ptxdist] [PATCH 2/2] util-linux: version bump 2.42.1 -> 2.42.2 Alexander Dahl via ptxdist
2026-06-25 19:23 ` Michael Olbrich [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260625192332.832429-1-m.olbrich@pengutronix.de \
--to=m.olbrich@pengutronix.de \
--cc=ada@thorsis.com \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox