drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Überschreiben von Dateien in NTFS-3G (Aktualisierung)
Name: |
Überschreiben von Dateien in NTFS-3G (Aktualisierung) |
|
ID: |
USN-2617-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 15.04 |
|
Datum: |
Fr, 22. Mai 2015, 19:51 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202 |
|
Applikationen: |
NTFS-3G |
|
Update von: |
Überschreiben von Dateien in FUSE |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============6628382601041609685== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lbXchHL2Qpc3b4BOX6Um9hJwgixSuui4u"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --lbXchHL2Qpc3b4BOX6Um9hJwgixSuui4u Content-Type: text/plain; charset=utf- Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-2617-2 May 22, 2015
ntfs-3g vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
Summary:
NTFS-3G could be made to overwrite files as the administrator.
Software Description: - ntfs-3g: read/write NTFS driver for FUSE
Details:
USN-2617-1 fixed a vulnerability in FUSE. This update provides the corresponding fix for the embedded FUSE copy in NTFS-3G.
Original advisory details:
Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative privileges.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 15.04: ntfs-3g 1:2014.2.15AR.3-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-2617-2 http://www.ubuntu.com/usn/usn-2617-1 CVE-2015-3202
Package Information: https://launchpad.net/ubuntu/+source/ntfs-3g/1:2014.2.15AR.3-1ubuntu0.1
--lbXchHL2Qpc3b4BOX6Um9hJwgixSuui4u Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJVXzjYAAoJEGVp2FWnRL6TKccQAKs/8JHdyaeqBzLsyDC86mgo SRK3dNqvs1zHe8HuM/z0HDVoR6p+TJK3Yl7SQEDJTBnyB4BT850kyciUSq6yeR9H X9Pu5A0/7nDpw5RsiFoGL53ZroqwzDOQUUC69MiFemYTOvLUtvlP82nh+ickA0If d2LkUQ471vKwcR1dAx04qOmk5Z21lZ3hYzIr3Tfo/jieTdb/fjP9KxYoLJzA7r1M FCgHaLDVKfaCU8EF3XtUlGnyooUW+Uu8G7YKDK28VQJIQ7evbQGIO3qFlxenN6pe jI0sw/uDAAGVYIRr2vvlHPwPSfQQGhkyQXFU+CP0yPdt0h3zHuRBEI2CxkGNdunV MgukIXJcXr4DUKgV49FkChQyfehLqdMwznyNqQgIHpr598075H/BHbmU5SF833Go u0a6W4nXdMaJY1E9yHqh8u/D5u7ITOomTbrWA919fSSPeO4lp6EQ1acgSd1AyLdG UpIxka0ced4ZJERtwl39R8E4YI8qQ9mp/nYfqgPe3FR4QwvS6prHSmIOHFi07vnF SSebN3esLtTsKjJtOqyHCPxFKINE2Pd7X8micKtwAmtzqenig3qxwLIr/78I+a5k rOgP4hhUgbiz+O+OmuxU3YVMmYdcw/vnypukKZmvxnRB0vtdNp2gj3QDnYuc+Y+7 MFZcRlJ1RnGF0myCoDUL =vsg8 -----END PGP SIGNATURE-----
--lbXchHL2Qpc3b4BOX6Um9hJwgixSuui4u--
--===============6628382601041609685== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============6628382601041609685==--
|
|
|
|