Page MenuHomeSolus

Update fuse to 2.9.8 to address CVE-2018-10906
ClosedPublic

Authored by kyrios123 on Jul 24 2018, 2:11 PM.
Tags
  • Restricted Project
Referenced Files
F11066072: D3392.diff
Fri, Aug 11, 5:40 PM
F10993728: D3392.id8379.diff
Tue, Jul 25, 6:57 PM
F10974690: D3392.id8379.diff
Sat, Jul 22, 1:43 AM
F10968881: D3392.id8370.diff
Thu, Jul 20, 8:03 PM
F10945272: D3392.id8370.diff
Sat, Jul 15, 3:24 AM
F10935528: D3392.diff
Wed, Jul 12, 9:34 PM
F10895692: D3392.diff
Jul 1 2023, 6:45 PM
F10878642: D3392.id.diff
Jun 21 2023, 11:54 AM
Subscribers
None

Details

Summary
  • libfuse no longer segfaults when fuse_interrupted() is called outside the event loop.
  • The fusermount binary has been hardened in several ways to reduce potential attack surface. Most importantly, mountpoints and mount options must now match a hard-coded whitelist. It is expected that this whitelist covers all regular use-cases.

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

Can still access my NAS using sshfs

Diff Detail

Repository
R861 fuse
Branch
master
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

sunnyflunk retitled this revision from Update fuse to 2.9.8 to Update fuse to 2.9.8 to address CVE-2018-10906.
This revision is now accepted and ready to land.Jul 24 2018, 11:40 PM
This revision was automatically updated to reflect the committed changes.