Errata ID | 74 |
---|---|
Date | 2018-05-16 |
Source package | util-linux |
Fixed in version | 2.29.2-1+deb9u1 |
Description | This update addresses the following issue: * bash-completion for umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion. (CVE-2018-7738) |
Additional notes | |
CVE ID | CVE-2018-7738 |
UCS Bug number | #46622 |