Debian Security Advisory

DLA-1468-1 fuse -- LTS security update

Date Reported:
15 Aug 2018
Affected Packages:
fuse
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2018-10906.
More information:
  • CVE-2018-10906

    This is a fix for a restriction bypass of the allow_other option when SELinux is active.

For Debian 8 Jessie, this problem has been fixed in version 2.9.3-15+deb8u3.

We recommend that you upgrade your fuse packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS