oss-security - [CVE-2018-10906] libfuse: restriction bypass of the "allow

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <1532431676.1547189.1451049432.34DB1AC3@webmail.messagingengine.com>
Date: Tue, 24 Jul 2018 12:27:56 +0100
From: Nikolaus Rath <nikolaus@...h.org>
To: oss-security@...ts.openwall.com
Subject: [CVE-2018-10906] libfuse: restriction bypass of the "allow_other" option
 when SELinux is active

Hi,

I've just released updated versions of libfuse 2.x and libfuse 3.x that fix CVE-2018-10906.

Jann Horn discovered that it is possible to bypass fusermount's restrictions on the use of the "allow_other" mount option as follows if SELinux is active. fusermount is a (typically setuid) helper for mounting FUSE file systems.

Best,
-Nikolaus

-- 
GPG Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F

             »Time flies like an arrow, fruit flies like a Banana.«

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.