Michael Weiss ec1082c58f fuse: 2.9.7 -> 2.9.8 (security, CVE-2018-10906) ... Upstream changelog: - SECURITY UPDATE: In previous versions of libfuse it was possible to for unprivileged users to specify the allow_other option even when this was forbidden in /etc/fuse.conf. The vulnerability is present only on systems where SELinux is active (including in permissive mode). - libfuse no longer segfaults when fuse_interrupted() is called outside the event loop. - The fusermount binary has been hardened in several ways to reduce potential attack surface. Most importantly, mountpoints and mount options must now match a hard-coded whitelist. It is expected that this whitelist covers all regular use-cases. - Fixed rename deadlock on FreeBSD.		2018-07-25 23:53:40 +02:00
..
common.nix	pkgs/*: remove unreferenced function arguments	2018-07-21 02:48:04 +00:00
default.nix	fuse: 2.9.7 -> 2.9.8 (security, CVE-2018-10906)	2018-07-25 23:53:40 +02:00
fuse3-install.patch	fuse3: 3.2.1 -> 3.2.2	2018-04-01 01:55:14 +02:00