fuse (2.7.2-1ubuntu2.3) hardy-security; urgency=low
* SECURITY UPDATE: arbitrary unprivileged unmount
- debian/patches/CVE-2011-0541.dpatch: don't follow symlinks when
unmounting in case of a failed mtab update in util/fusermount.c.
- debian/patches/CVE-2011-0542.dpatch: chdir to / before performing
mount/umount in util/fusermount.c.
- debian/patches/CVE-2011-0543.dpatch: remove legacy util-linux
support so symlinks don't get followed upon fallback in
lib/mount_util.c, util/fusermount.c.
- CVE-2011-0541
- CVE-2011-0542
- CVE-2011-0543
Date: Fri, 11 Feb 2011 15:06:00 -0500
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/hardy/+source/fuse/2.7.2-1ubuntu2.3
Format: 1.7
Date: Fri, 11 Feb 2011 15:06:00 -0500
Source: fuse
Binary: fuse-utils libfuse-dev libfuse2 fuse-source fuse-utils-udeb
libfuse2-udeb
Architecture: source
Version: 2.7.2-1ubuntu2.3
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
fuse-source - Source for the Fuse kernel module
fuse-utils - Filesystem in USErspace (utilities)
fuse-utils-udeb - Filesystem in USErspace (utilities)
libfuse-dev - Filesystem in USErspace (development files)
libfuse2 - Filesystem in USErspace library
libfuse2-udeb - Filesystem in USErspace library
Changes:
fuse (2.7.2-1ubuntu2.3) hardy-security; urgency=low
.
* SECURITY UPDATE: arbitrary unprivileged unmount
- debian/patches/CVE-2011-0541.dpatch: don't follow symlinks when
unmounting in case of a failed mtab update in util/fusermount.c.
- debian/patches/CVE-2011-0542.dpatch: chdir to / before performing
mount/umount in util/fusermount.c.
- debian/patches/CVE-2011-0543.dpatch: remove legacy util-linux
support so symlinks don't get followed upon fallback in
lib/mount_util.c, util/fusermount.c.
- CVE-2011-0541
- CVE-2011-0542
- CVE-2011-0543
Files:
a078e7da97c67a2e8932974152daa1d2 1551 libs optional fuse_2.7.2-1ubuntu2.3.dsc
d6ef479dae54fbe76fa652c172239905 24330 libs optional
fuse_2.7.2-1ubuntu2.3.diff.gz
Original-Maintainer: Bartosz Fenski <[email protected]>
--
Hardy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/hardy-changes
