Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Debian 9: DLA-1478-1 Urgent: NetworkManager Credentials Leak Patch

debian lts
Calendar Grey August 15, 2018
Dist Debian Esm H88
This announcement resolves an issue concerning the evasion of limitations associated with the allow_other flag in SELinux within the fuse component of Debian.
CVE-2018-10906 This is a fix for a restriction bypass of the "allow_other" option when SELinux is active
Topics%20covered

Topics Covered

security advisory critical debian security fix selinux fuse restriction bypass

Summary


For Debian 8 "Jessie", this problem has been fixed in version
2.9.3-15+deb8u3.

We recommend that you upgrade your fuse packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: fuse
Version: 2.9.3-15+deb8u3
CVE ID: CVE-2018-10906

Topics%20covered

Topics Covered

security advisory critical debian security fix selinux fuse restriction bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here