diff options
| author | Michael Weiss <dev.primeos@gmail.com> | 2018-07-25 23:48:13 +0200 |
|---|---|---|
| committer | Michael Weiss <dev.primeos@gmail.com> | 2018-07-25 23:53:40 +0200 |
| commit | ec1082c58fec2f0739855d4dc01df6fdd335e0a3 (patch) | |
| tree | 25b6616325f097af7a414cb02a6ddfda5b2d55a9 /pkgs/os-specific | |
| parent | 46cd782b43416969b1f11232ecf5b80e798a92a2 (diff) | |
| download | nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar.gz nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar.bz2 nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar.lz nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar.xz nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.tar.zst nixlib-ec1082c58fec2f0739855d4dc01df6fdd335e0a3.zip | |
fuse: 2.9.7 -> 2.9.8 (security, CVE-2018-10906)
Upstream changelog: - SECURITY UPDATE: In previous versions of libfuse it was possible to for unprivileged users to specify the allow_other option even when this was forbidden in /etc/fuse.conf. The vulnerability is present only on systems where SELinux is active (including in permissive mode). - libfuse no longer segfaults when fuse_interrupted() is called outside the event loop. - The fusermount binary has been hardened in several ways to reduce potential attack surface. Most importantly, mountpoints and mount options must now match a hard-coded whitelist. It is expected that this whitelist covers all regular use-cases. - Fixed rename deadlock on FreeBSD.
Diffstat (limited to 'pkgs/os-specific')
| -rw-r--r-- | pkgs/os-specific/linux/fuse/default.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkgs/os-specific/linux/fuse/default.nix b/pkgs/os-specific/linux/fuse/default.nix index 4c750dafcf75..644841131674 100644 --- a/pkgs/os-specific/linux/fuse/default.nix +++ b/pkgs/os-specific/linux/fuse/default.nix @@ -6,8 +6,8 @@ let }; in { fuse_2 = mkFuse { - version = "2.9.7"; - sha256Hash = "1wyjjfb7p4jrkk15zryzv33096a5fmsdyr2p4b00dd819wnly2n2"; + version = "2.9.8"; + sha256Hash = "0s04ln4k9zvvbjih8ybaa19fxg8xv7dcsz2yrlbk35psnf3l67af"; }; fuse_3 = mkFuse { |