Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#10195 - security bug in util-linux
Attached to Project:
Arch Linux
Opened by Hussam Al-Tayeb (hussam) - Tuesday, 15 April 2008, 01:23 GMT
Last edited by Greg (dolby) - Tuesday, 27 May 2008, 12:32 GMT
Opened by Hussam Al-Tayeb (hussam) - Tuesday, 15 April 2008, 01:23 GMT
Last edited by Greg (dolby) - Tuesday, 27 May 2008, 12:32 GMT
|
DetailsThe release notes for 2.13.1 mentions a fixed security bug CVE-2007-5191
http://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.13/v2.13.1-ReleaseNotes Please either update to 2.13.1 or backport the fix to our package. |
This task depends upon
Comment by Hussam Al-Tayeb (hussam) -
Tuesday, 15 April 2008, 01:40 GMT
An updated cryptloop support patch is available here http://cvs.archlinuxppc.org:7647/viewvc/Core/core/base/util-linux-ng/cryptoloop-support.patch?view=log
Comment by Hussam Al-Tayeb (hussam) -
Tuesday, 15 April 2008, 06:58 GMT
Additional information http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=ebbeb2c7ac1b00b6083905957837a271e80b187e