stable

cifs-utils-6.15-1.fc35

FEDORA-2022-7fda04ab5a created by abbra a year ago for Fedora 35

This is a security release to address the following bugs:

  • CVE-2022-27239: mount.cifs: fix length check for ip option parsing
  • CVE-2022-29869: mount.cifs: fix verbose messages on option parsing

Description

CVE-2022-27239:

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVE-2022-29869:

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Both issues were originally reported and fixed by Jeffrey Bencteux.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-7fda04ab5a

This update has been submitted for testing by abbra.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

abbra edited this update.

a year ago

This update has been pushed to testing.

a year ago
karma
BZ#2080525 cifs-utils-6.15 is available

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
modified
a year ago
BZ#2080525 cifs-utils-6.15 is available
0
1

Automated Test Results