From $URL: A bug has been reported recently for the mount.cifs utility which is part of the cifs-utils package. The tool has a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen() in the context of the user calling mount. The bug requires cifs-utils to be built with --with-systemd (enabled by default if supported). Bug is fixed in 6.11 so a bump may be useful but patches are available for most (if not all) affected versions.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6bbef22015f3243fc012becd396e145981eb6c05 commit 6bbef22015f3243fc012becd396e145981eb6c05 Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2020-09-18 06:09:20 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2020-09-18 06:09:29 +0000 net-fs/cifs-utils: Security bump to version 6.11 Bug: https://bugs.gentoo.org/743211 Package-Manager: Portage-3.0.7, Repoman-3.0.1 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> net-fs/cifs-utils/Manifest | 1 + net-fs/cifs-utils/cifs-utils-6.11.ebuild | 126 +++++++++++++++++++++++++++++++ 2 files changed, 127 insertions(+)
Thank you!
arm64 done
arm done
amd64 done
ppc stable
x86 stable
sparc stable
ppc64 stable. Maintainer(s), please cleanup.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1ad1ab37dc2746bb2a0dd1e46ed1f9132879d93e commit 1ad1ab37dc2746bb2a0dd1e46ed1f9132879d93e Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2020-09-28 07:26:03 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2020-09-28 07:26:03 +0000 net-fs/cifs-utils: Security cleanup Bug: https://bugs.gentoo.org/743211 Package-Manager: Portage-3.0.8, Repoman-3.0.1 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> net-fs/cifs-utils/Manifest | 2 - net-fs/cifs-utils/cifs-utils-6.10-r1.ebuild | 124 ---------------------------- net-fs/cifs-utils/cifs-utils-6.9-r1.ebuild | 119 -------------------------- 3 files changed, 245 deletions(-)
This issue was resolved and addressed in GLSA 202009-16 at https://security.gentoo.org/glsa/202009-16 by GLSA coordinator Sam James (sam_c).
