Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 23 Feb 2015 10:24:14 +0100
From: Florian Weimer <fweimer@...hat.com>
To: oss-security@...ts.openwall.com,
        "cve-assign@...re.org >> Assign a CVE Identifier" <cve-assign@...re.org>
Subject: Re: older fuseiso stuff

On 02/07/2015 12:17 AM, Kurt Seifried wrote:
> https://bugzilla.redhat.com/show_bug.cgi?id=863102 
> https://bugzilla.redhat.com/show_bug.cgi?id=863091
> 
> may warrant a CVE

I opened up the dependent bugs which have more information:

https://bugzilla.redhat.com/show_bug.cgi?id=861358
https://bugzilla.redhat.com/show_bug.cgi?id=862211

Note that fuseiso is fairly broken and does not even support UDF, so
its usefulness is limited.  Newer systems have the unprivileged image
mounting functionality provided by udisks2, so a userspace
implementation of the ISO 9660 and UDF file systems is no longer needed.

-- 
Florian Weimer / Red Hat Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.