Errata overview
Errata ID 74
Date 2018-05-16
Source package util-linux
Fixed in version 2.29.2-1+deb9u1
This update addresses the following issue:
* bash-completion for umount allows local users to gain privileges by
  embedding shell commands in a mountpoint name, which is mishandled during a
  umount command (within Bash) by a different user, as demonstrated by
  logging in as root and entering umount followed by a tab character for
  autocompletion. (CVE-2018-7738)
Additional notes
CVE ID CVE-2018-7738
UCS Bug number #46622