linux/meta-openembedded.git, branch daisy-eneaMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=daisy-enea2015-07-16T13:43:54+00:00fuse: fix for CVE-2015-3202 Privilegde Escalation2015-07-16T13:43:54+00:00Tudor Floreatudor.florea@enea.com2015-07-16T13:42:38+00:00urn:sha1:7c4a652284bf28e82db125adc771af48ae6a99a8
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before
invoking (1) mount or (2) umount as root, which allows local users to write
to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is
used by mount's debugging feature.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202
http://www.openwall.com/lists/oss-security/2015/05/21/9
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
initial commit for Enea Linux 4.02014-06-26T12:21:06+00:00Adrian Dudauadrian.dudau@enea.com2014-06-26T12:21:06+00:00urn:sha1:491e08d355107e0285d1345c5d1ed895cab524c4
Migrated from the internal git server on the daisy-enea branch
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>