Joined: 12 May 2004
|Posted: Mon Jul 27, 2020 6:26 pm Post subject: [ GLSA 202007-20 ] fuseiso
|Gentoo Linux Security Advisory
Title: fuseiso: Multiple vulnerabilities (GLSA 202007-20)
Multiple vulnerabilities have been found in fuseiso, the worst of
which could result in the arbitrary execution of code.
FuseISO is a FUSE module to mount ISO filesystem images (.iso, .nrg,
.bin, .mdf and .img files).
Vulnerable: < 20070708-r3
Unaffected: >= 20070708-r3
Architectures: All supported architectures
Multiple vulnerabilities have been discovered in fuseiso. Please review
the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted ISO
file using fuseiso, possibly resulting in execution of arbitrary code
with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All fuseiso users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-fs/fuseiso-20070708-r3"