Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 21 FEDORA-2015-8751 Moderate: FUSE Privilege Escalation

fedora
Calendar Grey June 9, 2015
Dist Fedora Esm H88
Important release note for FUSE 2.9.4 on Fedora 21 resolving security vulnerabilities related to privilege escalation by correcting flaws in environmental filtering.
Update to 2.9.4, which fixes CVE-2015-3202.

Summary

With FUSE it is possible to implement a fully functional filesystem in a

userspace program. This package contains the FUSE userspace tools to

mount a FUSE filesystem.

Update Information:

Update to 2.9.4, which fixes CVE-2015-3202.

Topics%20covered

Topics Covered

security advisory fedora privilege escalation security fix fuse

Change Log

* Fri May 22 2015 Tom Callaway 2.9.4-1 - update to 2.9.4 - fixes CVE-2015-3202

References


[ 1 ] Bug #1224103 - CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation https://bugzilla.redhat.com/show_bug.cgi?id=1224103

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update fuse' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: fuse
Product: Fedora 21
Version: 2.9.4
Release: 1.fc21
URL: https://github.com/libfuse/libfuse
Summary: File System in Userspace (FUSE) utilities

Topics%20covered

Topics Covered

security advisory fedora privilege escalation security fix fuse

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here