| Description: | Description:
The remote host is missing updates announced in
advisory RHSA-2005:782.
The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function.
The mount package contains the mount, umount, swapon and swapoff programs.
A bug was found in the way the umount command is executed by normal users.
It may be possible for a user to gain elevated privileges if the user is
able to execute the umount -r command on a mounted file system. The
file system will be re-mounted only with the readonly flag set, clearing
flags such as nosuid and noexec. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2005-2876 to
this issue.
This update also fixes a hardlink bug in the script command for Red Hat
Enterprise Linux 2.1. If a local user places a hardlinked file named
typescript in a directory they have write access to, the file will be
overwritten if the user running script has write permissions to the
destination file. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CVE-2001-1494 to this issue.
All users of util-linux and mount should upgrade to these updated packages,
which contain backported patches to correct these issues.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
http://rhn.redhat.com/errata/RHSA-2005-782.html
Risk factor : High
CVSS Score:
7.2
|
