Peter Korsgaard c6989413b9
libfuse: security bump to version 2.9.8 ...
Fixes CVE-2018-10906 - In fuse before versions 2.9.8 and 3.x before 3.2.5,
fusermount is vulnerable to a restriction bypass when SELinux is active.
This allows non-root users to mount a FUSE file system with the
'allow_other' mount option regardless of whether 'user_allow_other' is set
in the fuse configuration. An attacker may use this flaw to mount a FUSE
file system, accessible by other users, and trick them into accessing files
on that file system, possibly causing Denial of Service or other unspecified
effects.
And additionally:
- libfuse no longer segfaults when fuse_interrupted() is called outside the
event loop.
- The fusermount binary has been hardened in several ways to reduce
potential attack surface. Most importantly, mountpoints and mount options
must now match a hard-coded whitelist. It is expected that this whitelist
covers all regular use-cases.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
(cherry picked from commit 9c2bbc3fc9peter@korsgaard.com >
2018-08-24 10:42:37 +02:00
2018-08-23 22:42:06 +02:00
2018-08-09 22:58:37 +02:00
2018-08-23 22:42:06 +02:00
2018-06-17 17:17:23 +02:00
2018-06-17 16:42:49 +02:00
2018-07-19 23:40:04 +02:00
2018-06-18 10:04:59 +02:00
2018-06-17 17:34:57 +02:00
2018-08-24 10:35:05 +02:00
2018-08-24 09:33:18 +02:00
2018-06-17 17:12:50 +02:00
2018-07-19 20:06:39 +02:00
2018-07-18 23:33:57 +02:00
2018-08-23 21:20:26 +02:00
2018-08-23 21:06:24 +02:00
2018-06-18 06:53:57 +02:00
2018-06-17 16:45:45 +02:00
2018-08-23 21:18:20 +02:00
2018-07-18 23:35:59 +02:00
2018-07-18 23:25:50 +02:00
2018-08-23 23:58:36 +02:00
2018-06-18 10:07:39 +02:00
2018-08-23 20:01:45 +02:00
2018-08-23 23:58:36 +02:00
2018-06-17 16:49:04 +02:00
2018-06-17 17:37:04 +02:00
2018-08-15 22:48:04 +02:00
2018-06-17 17:39:55 +02:00
2018-07-20 23:30:50 +02:00
2018-08-23 21:17:40 +02:00
2018-08-23 23:51:57 +02:00
2018-07-18 23:32:00 +02:00
2018-08-23 22:12:09 +02:00
2018-06-17 16:46:11 +02:00
2018-06-17 17:30:19 +02:00
2018-06-17 17:29:50 +02:00
2018-08-23 17:51:31 +02:00
2018-08-23 23:58:36 +02:00
2018-08-23 23:58:36 +02:00
2018-07-19 11:50:58 +02:00
2018-07-19 11:40:39 +02:00
2018-06-17 17:27:53 +02:00
2018-06-17 16:49:21 +02:00
2018-08-23 23:58:36 +02:00
2018-08-24 00:13:32 +02:00
2018-06-11 23:07:23 +02:00
2018-07-19 23:29:58 +02:00
2018-08-24 10:42:37 +02:00
2018-06-17 17:40:59 +02:00
2018-07-19 23:43:17 +02:00
2018-06-17 16:49:14 +02:00
2018-07-19 20:01:29 +02:00
2018-08-24 10:40:56 +02:00
2018-07-19 12:02:04 +02:00
2018-06-17 20:29:38 +02:00
2018-08-24 10:36:49 +02:00
2018-07-19 19:52:54 +02:00
2018-06-17 16:42:49 +02:00
2018-07-19 11:53:34 +02:00
2018-06-17 17:28:28 +02:00
2018-06-17 17:26:14 +02:00
2018-06-17 17:25:15 +02:00
2018-08-24 10:29:47 +02:00
2018-08-24 10:39:19 +02:00
2018-07-19 19:57:14 +02:00
2018-08-24 00:10:26 +02:00
2018-07-19 19:58:40 +02:00
2018-06-11 23:05:09 +02:00
2018-06-11 23:00:02 +02:00
2018-08-23 21:45:36 +02:00
2018-08-24 00:02:19 +02:00
2018-08-24 10:32:28 +02:00
2018-08-10 08:26:32 +02:00
2018-08-23 22:16:03 +02:00
2018-08-23 21:26:40 +02:00
2018-08-24 10:19:37 +02:00
2018-08-23 23:58:36 +02:00
2018-06-17 17:28:12 +02:00
2018-08-24 10:06:39 +02:00
2018-08-23 22:17:57 +02:00
2018-08-24 09:34:39 +02:00
2018-06-17 17:24:51 +02:00
2018-07-19 12:08:52 +02:00
2018-06-17 16:42:49 +02:00
2018-06-17 17:44:54 +02:00
2018-07-17 22:05:36 +02:00
2018-07-18 23:51:01 +02:00
2018-06-17 17:39:35 +02:00
2018-06-17 17:14:36 +02:00
2018-07-18 23:14:46 +02:00
2018-06-17 16:44:07 +02:00
2018-07-17 22:05:36 +02:00
2018-06-17 17:43:45 +02:00
2018-07-19 12:04:09 +02:00
2018-08-10 10:36:12 +02:00
2018-06-17 16:42:49 +02:00
2018-06-17 17:41:32 +02:00
2018-08-24 00:40:11 +02:00
2018-08-23 22:38:00 +02:00
2018-07-19 20:02:30 +02:00
2018-06-17 17:34:49 +02:00
2018-08-23 21:21:11 +02:00
2018-07-17 22:05:36 +02:00
2018-06-11 22:57:19 +02:00
2018-06-17 17:30:55 +02:00
2018-08-24 09:38:22 +02:00
2018-08-24 00:09:13 +02:00
2018-06-11 23:02:07 +02:00
2018-08-24 09:21:20 +02:00
2018-07-19 20:14:07 +02:00
2018-07-21 00:20:12 +02:00
2018-08-24 08:49:12 +02:00
2018-08-24 09:02:50 +02:00
2018-06-17 16:47:22 +02:00
2018-08-23 22:40:30 +02:00
2018-08-23 21:40:38 +02:00
2018-07-19 11:57:14 +02:00
2018-06-11 23:08:58 +02:00
c6989413b9