update 2.37.2 (2021-08-16) to 2.37.3 (2022-01-24)
Changelog:
- https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.3-ChangeLog
util-linux 2.37.3 Release Notes
===============================
This release fixes two security mount(8) and umount(8) issues:
CVE-2021-3996
Improper UID check in libmount allows an unprivileged user to unmount FUSE
filesystems of users with similar UID.
CVE-2021-3995
This issue is related to parsing the /proc/self/mountinfo file allows an
unprivileged user to unmount other user's filesystems that are either
world-writable themselves or mounted in a world-writable directory.
1) Python3 needs the util-linux:host dependency otherwise uuid support will
leak over from the build host during a clean build, only to use util-linux:host
for uuid support during a subsequent rebuild (which fails, because of #2)
2) util-linux:host needs -fPIC as this is what Python3 requires (clean builds
work because of #1...)
3) Remove toolchain from util-linux:host to avoid a circular toolchain
reference now that Python3 is also part of toolchain (via meson)
