Tudor Florea 96a4d9ad7b fuse: fix for CVE-2015-3202 Privilege Escalation
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before
invoking (1) mount or (2) umount as root, which allows local users to write
to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is
used by mount's debugging feature.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202
http://www.openwall.com/lists/oss-security/2015/05/21/9

Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-07-30 21:03:26 +02:00
2015-07-30 11:34:07 -04:00
2015-07-30 21:00:27 +02:00
2015-07-16 21:09:05 +02:00

Collection of layers for the OE-core universe

Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme 112 MiB
Languages
BitBake 85.2%
Shell 6.1%
C 3%
Roff 2.1%
NASL 1.9%
Other 1.5%