Red Hat Security Advisory

RHSA-2018:3324

fuse security update

Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) fuse-2.9.2-11.el7, fuse-libs-2.9.2-11.el7
Red Hat Enterprise Linux Client Optional (v. 7) fuse-devel-2.9.2-11.el7
Red Hat Enterprise Linux ComputeNode (v. 7) fuse-2.9.2-11.el7, fuse-libs-2.9.2-11.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) fuse-devel-2.9.2-11.el7
Red Hat Enterprise Linux Server (v. 7) fuse-2.9.2-11.el7, fuse-devel-2.9.2-11.el7, fuse-devel-2.9.2-11.el7.ppc +2
Red Hat Enterprise Linux Workstation (v. 7) fuse-2.9.2-11.el7, fuse-devel-2.9.2-11.el7, fuse-libs-2.9.2-11.el7
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) fuse-2.9.2-11.el7, fuse-devel-2.9.2-11.el7, fuse-libs-2.9.2-11.el7

TI-2018-07719 CVE-2018-10906 · GHSA-35h9-x59q-8xcf

LOW 37

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01414 Published 2018-07-24 Partial fix CWE-285