[CLSA-2026:1794339298] Fix CVE(s): CVE-2026-53613
Type:
security
Severity:
Important
Release date:
2026-11-10 19:35:09 UTC
Description:
* SECURITY UPDATE: TOCTOU in restricted mount target resolution allows a local user with an fstab "user" entry to redirect the mount to a root-owned location and gain root privileges - debian/patches/CVE-2026-53613.patch: pin the target of non-root mounts with an O_PATH descriptor that refuses symlinks in any path component, take the canonical target from the pinned descriptor instead of resolving it with root privileges, and pass /proc/self/fd/ of the pinned target and bind/move source to mount(2) in libmount - CVE-2026-53613
CVEs fixed:
Updated packages:
  • fdisk_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:96eb553ee31894890c826e0897298a416f90b71e
  • libblkid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:89955ab3d19c67a98dc2905046c476cc61537584
  • libblkid1_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:e8f1e1925c219a7af83ad59f62671d90873b0b40
  • libfdisk-dev_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:b0244431e7c3a4c914c11795285589fc6eb95a66
  • libfdisk1_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:9bb0997d68f66a2a8919d2c7cd6c285c06d021ff
  • libmount-dev_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:688869c701fc761931edfa50737bb9646226a1b2
  • libmount1_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:d206af108cf982123e6bd5710630b876796787df
  • libsmartcols-dev_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:9334a4c5ebf9d0573bf3309511cc110e0fab4a87
  • libsmartcols1_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:92f95c5f00170900628da98400de9caa30cd61db
  • libuuid1_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:8b5edb3c6ad3a66866cad62b57644c96a2ce0525
  • mount_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:e4d73f0c8c2bae9c4f94b0e7ef3ccae0e08adbe8
  • rfkill_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:16a1dc62728ba23d5ec66bf08895c1f098b6adcc
  • util-linux_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:13c01143d34fc173cf0f7858c8bcd8e8211d7c25
  • util-linux-locales_2.33.1-0.1+deb10u1+tuxcare.els1_all.deb
    sha:fb643c3480e604b65be12c913405f8942d5b3bbb
  • uuid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:b48a33011fbbdf16e24c2f5f30d200207095b7f9
  • uuid-runtime_2.33.1-0.1+deb10u1+tuxcare.els1_amd64.deb
    sha:e5546af20dfe5d5ea619b95adc62df14e9a4a1a4
  • fdisk_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:9170bf66b59e762d97e847754a093a9c58726f04
  • libblkid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:ae1c35434e2da8e24d18200dd4a2c3a0340b676c
  • libblkid1_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:2bf47dc3b7e68eaaca37f63b1add3802dffb6713
  • libfdisk-dev_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:49348790340b0ba07fecbd0c5e2889485cc085d7
  • libfdisk1_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:3d6222d809e0b10be80e9d3da7deed93c81ec90e
  • libmount-dev_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:ef16a9bbd4ffbef749201fb9c70fbe681fa33115
  • libmount1_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:0b8a6e21b8023511ba9743804d562af8403bd54a
  • libsmartcols-dev_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:d1c3a798889346a0239f14f3c96505acc1d6f71d
  • libsmartcols1_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:00c2cdc4619158d23e50d161b73e7fd7f1b9b544
  • libuuid1_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:c4f0767466e7a989bf33cf474adc7de57e45a007
  • mount_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:7cf1db909daa951b88f0a833fdfaada3648f63c7
  • rfkill_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:8f2481f6da55cb545b75b1e359285c2ab64519f8
  • util-linux_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:6c95f9792bf7aacaf9f40d8559d30c6464e3eca1
  • uuid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:bf55af63e34fddeee1fac82ea2dc85eb3f68d168
  • uuid-runtime_2.33.1-0.1+deb10u1+tuxcare.els1_arm64.deb
    sha:06b7505262a56fdf49a69bcdafdfa0e98495581b
  • fdisk_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:de2bfee1110a4d82b2e8d468e8308f0c0ecb8ef6
  • libblkid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:7e89985f218ee58b367ea08c63835015700cf184
  • libblkid1_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:f09282db2192ca5326393d5e7ab519bbf4a1adaa
  • libfdisk-dev_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:e23297f1d87b02bd9043d018e800127355a2e77a
  • libfdisk1_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:b8241930cbbec5b9da1d9ce72abee861bea454da
  • libmount-dev_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:4758118c4b2f7bfc1ea4f02bd10f0158be3b0a41
  • libmount1_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:045fb2b5f15b1a71985a5a64e513a71ff10994f8
  • libsmartcols-dev_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:6f5330244187dd96652cd4b704539a493f19baa6
  • libsmartcols1_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:00dea920da53e8ca76da80af3efe42eda0abaafb
  • libuuid1_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:66ee856251688ddaf5b0bc8624c94159bc5fd642
  • mount_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:6bd19ebd1280491f70d2f5b30064b8847cdfc8bf
  • rfkill_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:3d74e8abaddb498f38c8136d4273fbcc2c27f699
  • util-linux_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:35176866f0597893a021d4a8e5db2b179f0e0cd6
  • uuid-dev_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:52876808ead47e84bfc60704bb4e7c267931b740
  • uuid-runtime_2.33.1-0.1+deb10u1+tuxcare.els1_armel.deb
    sha:2fda695fa0975c2de18e95ca987c2c9d9442705a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.