tocsin

Debian/fuse: unknown

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mount

Action: Upgrade fuse to 2.8.5-1 or later.

Affected

introducedfixedlast affected
02.8.5-1-

Fixed versions

2.8.5-1

Sources

published · modified · JSON