[CLSA-2026:1782989143] util-linux: Fix of 4 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-07-02 10:46:04 UTC
Description:
- CVE-2026-27456: fix TOCTOU symlink race in SUID mount loop device setup that allowed non-root users to access arbitrary root-owned files via symlink swap between path resolution and open
CVEs fixed:
Updated packages:
  • libblkid-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:2a457c1c5b98cbb9678e9142d401ad180950fd6b2e97e5c442f3221ec2f39af6
  • libblkid-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:a8e9aaf399333798703e024583f29dd417e729409ea0a4dfdff18b2b87416e3d
  • libblkid-devel-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:164547a5a070eac3542504a50b40ef7f47af4a6f918f59c4b017c53b2ac16d29
  • libblkid-devel-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:c4b27a2200eb3da25f0aa46c95893ba2158577c4df75dc4524cfd7cf6d81453e
  • libfdisk-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:1590e7064a5cab405bdd61326ccdc760ca19725a7affa62a569be187b77d19bc
  • libfdisk-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:850bc261f9a52162c60f57323eba1e3c0b901f26bf683aa366dc3488106133a6
  • libfdisk-devel-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:16171f2e0b62139d62120afb963ee87bd654e883a299f6efa253f19fdd5662cc
  • libfdisk-devel-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:565152313ca2d9b6f7ef5bb93e453ae561bcec611540cdacc61e42b145657ca0
  • libmount-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:d92e0666c259f2429caacc92964b97c82570828829f0e57215bd98a3e5b08acd
  • libmount-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:527f48976344023f752c287871c0074ca50c9ddabf813909e8d4a78d790782eb
  • libmount-devel-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:059dc99fb0c270c2ff533d3a96f68afa83de87b8932473dd620e91870be5803a
  • libmount-devel-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:b03801ed2f64588c63bec1c7f070d4f72a6e7adfc975dafdb3d2714237b5e9db
  • libsmartcols-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:3d288778392aa32b1e552efd6a17f6c3813bf006ff61ab795a9758d63c3653de
  • libsmartcols-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:878db4bc57ccc698bbbd65be556875ab54128802115afee02385a141f8e5cee4
  • libsmartcols-devel-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:4f1f58befc2aeea3b5223227e37e8d05677986d155755de16e927df8ed08b814
  • libsmartcols-devel-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:d565dc967cf36c1a14509a9d23b7d4664bbfc2371c75a9fdbfdc412f880549e3
  • libuuid-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:f94344e43bf89f37f0d44a1595ffcae31248fc0b7591331c65c8a9da91132383
  • libuuid-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:a67de5ffad1040332d749cb86efd7c8e907209abb839e421eec5a33d7ed97c9a
  • libuuid-devel-2.37.4-21.el9_6.tuxcare.els3.i686.rpm
    sha:5ef8aac84bcbeb3c93e24eb38747f6e847f6ff7f9cf8036fb7325847e6de19c3
  • libuuid-devel-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:e6a97507298ca7c5c02a2eca608a9e2e9b1107fd1d19af351f3898d82872db0a
  • python3-libmount-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:aa0a4a68444b1a2cf67c266f40d2086479e6e09018035461e11bf1e53ab195fc
  • util-linux-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:4ed68db979ae16b321a8148c2122ffe9d5bbd6459a595e876853f8f8bc57d5e4
  • util-linux-core-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:fdeb2d623b98e765d437bd85a19715792243889885b15b9bd524042a741a17a8
  • util-linux-user-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:2471d31d7adc59f4b584266ecf0c1d416381d58e4bc898b423b03ff4da729c38
  • uuidd-2.37.4-21.el9_6.tuxcare.els3.x86_64.rpm
    sha:b2edb4bd71e1b443e71d26794402a074dba66f118205882c60bcc23e9c850b83
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.