From:
[email protected]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ------------------------------------------------------------------------ Debian Security Advisory DSA-1989-1
[email protected] http://www.debian.org/security/ Giuseppe Iuculano February 02, 2010
http://www.debian.org/security/faq
- ------------------------------------------------------------------------
Packages : fuse
Vulnerability : denial of service
Problem type : local
Debian-specific: no
CVE Id : CVE-2009-3297
Debian Bug : 567633
Dan Rosenberg discovered a race condition in FUSE, a Filesystem in USErspace.
A local attacker, with access to use FUSE, could unmount arbitrary
locations, leading to a denial of service.
For the oldstable distribution (etch), this problem has been fixed in
version 2.5.3-4.4+etch1.
For the stable distribution (lenny), this problem has been fixed in
version 2.7.4-1.1+lenny1.
For the unstable distribution (sid), this problem has been fixed in
version 2.8.1-1.2, and will migrate to the testing distribution (squeeze) shortly.
We recommend that you upgrade your fuse packages.
Upgrade instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian (oldstable)
- ------------------
Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.
Source archives:
http://security.debian.org/pool/updates/main/f/fuse/fuse_2.5.3-4.4+etch1.dsc
Size/MD5 checksum: 627 5886da280cc253c8ec2c04f5423238ee
http://security.debian.org/pool/updates/main/f/fuse/fuse_2.5.3.orig.tar.gz
Size/MD5 checksum: 409443 9c7e8b6606b9f158ae20b8521ba2867c
http://security.debian.org/pool/updates/main/f/fuse/fuse_2.5.3-4.4+etch1.diff.gz
Size/MD5 checksum: 11785 884b1f0d8646b121d133bb62a42e23c3
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_alpha.deb
Size/MD5 checksum: 109494 a46c800a39108d6a148e4db0e1d7d931
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_alpha.deb
Size/MD5 checksum: 54860 4d1acaf1b078a4370c90e47fb4c015e6
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_alpha.deb
Size/MD5 checksum: 59726 414582a9494fd50bed1bc41fdb17bf29
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_amd64.deb
Size/MD5 checksum: 98016 fcc2e4f1981cc75fbe341be0012490fc
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_amd64.deb
Size/MD5 checksum: 53530 d3857a1f96067112cbe1e7a428178686
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_amd64.deb
Size/MD5 checksum: 58916 5b992f296e4fba939e27fa6bd961ea6d
arm architecture (ARM)
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_arm.deb
Size/MD5 checksum: 48512 7be71b3c68391c288d7992f2e135449b
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_arm.deb
Size/MD5 checksum: 93024 5c703f36949e7f156e4b59245c224eff
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_arm.deb
Size/MD5 checksum: 57820 345ad9a6f3ada4facd993823eded7663
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_hppa.deb
Size/MD5 checksum: 56194 6a57e0f225759c4c79e5686378834981
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_hppa.deb
Size/MD5 checksum: 103676 afb7fd5cb28ea33c8b1b37f53349e7e9
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_hppa.deb
Size/MD5 checksum: 59130 fc3f13580d207f0fe6bf9cfe0034f312
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_i386.deb
Size/MD5 checksum: 94356 c692a6cb705c58ff1cea736f51bec18c
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_i386.deb
Size/MD5 checksum: 50812 55537e1c0561f86fff06f0a1319098de
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_i386.deb
Size/MD5 checksum: 58368 cfd1cee4477d2636b8b522a25310c984
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_ia64.deb
Size/MD5 checksum: 63764 0c9b12e7c71d48e2bdc9f3de90c4f3c9
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_ia64.deb
Size/MD5 checksum: 115500 8135a9f1b1aead628853749e447784fc
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_ia64.deb
Size/MD5 checksum: 65680 f071d857c64ad4c22aa2266fd1089032
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_mipsel.deb
Size/MD5 checksum: 58768 4162cfc57ba231f3af6d012d590e8375
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_mipsel.deb
Size/MD5 checksum: 103580 095f061de8c350ae2141924b7529ed45
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_mipsel.deb
Size/MD5 checksum: 51218 794ae7a598cdd02a60a410078562aa07
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4.4+etch1_powerpc.deb
Size/MD5 checksum: 58388 4a586a8d11c5bd2c6a8e6e8e0256e703
http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3-4.4+etch1_powerpc.deb
Size/MD5 checksum: 98048 d15b93fa2fe7157366dc2eb37f8492a9
http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4+etch1_powerpc.deb
Size/MD5 checksum: 51736 161e6dc0be6a51ab3f3f69be4dc10190
s390 architecture (IBM S/390)
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)