-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=LCGf
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2617-3
May 27, 2015
ntfs-3g vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
Summary:
NTFS-3G could be made to overwrite files as the administrator.
Software Description:
- ntfs-3g: read/write NTFS driver for FUSE
Details:
USN-2617-1 fixed a vulnerability in NTFS-3G. The original patch did not
completely address the issue. This update fixes the problem.
Original advisory details:
Tavis Ormandy discovered that FUSE incorrectly filtered environment
variables. A local attacker could use this issue to gain administrative
privileges.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 15.04:
ntfs-3g 1:2014.2.15AR.3-1ubuntu0.2
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2617-3
http://www.ubuntu.com/usn/usn-2617-1
CVE-2015-3202
Package Information:
https://launchpad.net/ubuntu/+source/ntfs-3g/1:2014.2.15AR.3-1ubuntu0.2
No comments:
Post a Comment