mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-01-01 13:58:06 +00:00
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202 http://www.openwall.com/lists/oss-security/2015/05/21/9 Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> |
||
|---|---|---|
| contrib | ||
| meta-efl | ||
| meta-filesystems | ||
| meta-gnome | ||
| meta-gpe | ||
| meta-initramfs | ||
| meta-multimedia | ||
| meta-networking | ||
| meta-oe | ||
| meta-perl | ||
| meta-python | ||
| meta-ruby | ||
| meta-systemd | ||
| meta-webserver | ||
| meta-xfce | ||
| toolchain-layer | ||
| .gitignore | ||
| COPYING.MIT | ||
| README | ||
Collection of layers for the OE-core universe Please see the respective READMEs in the layer subdirectories