CVE-2021-37600: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. Unreleased patch: https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c):
Upstream don't consider this an issue: https://github.com/karelzak/util-linux/issues/1395#issuecomment-888984731.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da60551412d12ea1b7b0fe27a7603fb7873d63c2 commit da60551412d12ea1b7b0fe27a7603fb7873d63c2 Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2021-08-11 12:25:48 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2021-08-11 12:30:42 +0000 sys-apps/util-linux: Revbump to add various upstream fixes * Erase names in agetty by pressing CTRL-C (#804972) * Fixed user mount of davfs2 filesystems (#805218) * Fixed lscpu segfault on riscv plattform with upstream patch (#802606) + Fixed potential buffer overflow in ipcutils (#806070) (CVE-2021-37600) Bug: https://bugs.gentoo.org/806070 Closes: https://bugs.gentoo.org/804972 Closes: https://bugs.gentoo.org/805218 Closes: https://bugs.gentoo.org/802606 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> .../util-linux-2.37.1-agetty_ctrl-c_erase.patch | 50 +++ .../util-linux-2.37.1-ipcutils_calloc_check.patch | 25 ++ .../util-linux-2.37.1-libmount_setgroups_fix.patch | 38 +++ ...l-linux-2.37.1-lscpu_NULL_dereference_fix.patch | 50 +++ sys-apps/util-linux/util-linux-2.37.1-r1.ebuild | 338 +++++++++++++++++++++ 5 files changed, 501 insertions(+)
Please cleanup.
