tocsin

Debian/fuse: unknown

fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.

Action: Upgrade fuse to 2.8.5-1 or later.

Affected

introducedfixedlast affected
02.8.5-1-

Fixed versions

2.8.5-1

Sources

published · modified · JSON