~ubuntu-branches/ubuntu/maverick/fuse/maverick-security : changes

~ubuntu-branches/ubuntu/maverick/fuse/maverick-security » Changes from revision 44

From Revision 44 to 25

Rev	Summary	Authors	Tags	Date
44	* SECURITY UPDATE: arbitrary unprivileged unmount * SECURITY UPDATE: arbitrary unprivileged unmount - debian/patches/005-CVE-2011-0541.dpatch: don't follow symlinks when unmounting in case of a failed mtab update in util/fusermount.c. - debian/patches/006-CVE-2011-0542.dpatch: chdir to / before performing mount/umount in util/fusermount.c. - debian/patches/007-CVE-2011-0543.dpatch: remove legacy util-linux support so symlinks don't get followed upon fallback in lib/mount_util.c, util/fusermount.c. Remove unneeded --disable-legacy-umount option in configure.in. - debian/rules: remove dh_autoreconf and obsolete --disable-legacy-umount configure option. - debian/control: Remove dh-autoreconf from Build-Depends. - CVE-2011-0541 - CVE-2011-0542 - CVE-2011-0543 * Removed unused 003-CVE-2009-3297.dpatch patch.	Marc Deslauriers	2.8.4-1ubuntu1.3	13 years ago
43	* SECURITY UPDATE: arbitrary unprivileged unmount (LP: #6706... * SECURITY UPDATE: arbitrary unprivileged unmount (LP: #670622) - debian/patches/004-CVE-2010-3879.dpatch: - debian/control: make libfuse2 depend on version of mount that contains backported --fake support. Add dh-autoreconf to Build-Depends. - debian/rules: add dh_autoreconf and build with --disable-legacy-umount. - CVE-2010-3879	Marc Deslauriers	2.8.4-1ubuntu1.1	13 years ago
42	* Resynchronise with Debian (fixing hang with auditd, LP: #6... * Resynchronise with Debian (fixing hang with auditd, LP: #634554). Remaining changes: - debian/control: Add Breaks to ensure right version of udev is used. - Use udev rules instead of init script: + Add debian/45-fuse.rules: Put /dev/fuse into group fuse. + debian/fuse-utils.postinst: Try to load the fuse module only if it's still a module, remove it from /etc/modules/ anyway. + debian/rules, debian/fuse-utils.install: Don't install the init script; install the udev rule. - initramfs support, for booting from ntfs-3g in wubi: + debian/fuse-utils.initramfs-hook: Copy /sbin/mount.fuse and the fuse kernel module into the initramfs. Use manual_add_modules not force_load; fuse will be loaded automatically if necessary (it's a built-in in Ubuntu anyway) + debian/rules: Install above file into fuse-utils. + debian/fuse-utils.postinst: Call update-initramfs. + (Forwarded to Debian #505691) - Create libfuse2-udeb and fuse-utils-udeb. (Forwarded to Debian #505697) - debian/fuse-utils.install: Install ulockmgr_server. - debian/{rules,libfuse2.install,fuse-utils.lintian}: Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. This allows mounting ntfs filesystems in /etc/fstab. (Debian #452412) - debian/{rules,fuse-utils.postinst}: Install fusermount with 4755 permissions (remaining change from "Dynamic foreground user access"). - debian/fuse-utils.postinst: + Don't fail if udev is running and /dev/fuse does not exist. (Forwarded to Debian #505685) - debian/fuse-utils.preinst: + Remove the module configuration file on upgrade if unmodified. + Remove old rules file if unchanged * Re-enable 000-Build_system_do_not_install_init_script patch.	Colin Watson	2.8.4-1ubuntu1	13 years ago
41	* SECURITY UPDATE: local attacker can trick fuse into unmoun... * SECURITY UPDATE: local attacker can trick fuse into unmounting a filesystem from the wrong location. - debian/patches/200-fix_mount_symlink_handling: upstream fixes. - CVE-2009-3297	Kees Cook	2.8.1-1.1ubuntu2	14 years ago
40	* Merge with Debian testing (lp: #506958). Remaining changes... * Merge with Debian testing (lp: #506958). Remaining changes: - debian/control: Add Breaks to ensure right version of udev is used. - Use udev rules instead of init script: + Add debian/45-fuse.rules: Put /dev/fuse into group fuse. + debian/fuse-utils.postinst: Try to load the fuse module only if it's still a module, remove it from /etc/modules/ anyway. + debian/rules, debian/fuse-utils.install: Don't install the init script; install the udev rule. - initramfs support, for booting from ntfs-3g in wubi: + debian/fuse-utils.initramfs-hook: Copy /sbin/mount.fuse and the fuse kernel module into the initramfs. Use manual_add_modules not force_load; fuse will be loaded automatically if necessary (it's a built-in in Ubuntu anyway) + debian/rules: Install above file into fuse-utils. + debian/fuse-utils.postinst: Call update-initramfs. + (Forwarded to Debian #505691) - Create libfuse2-udeb and fuse-utils-udeb. (Forwarded to Debian #505697) - debian/fuse-utils.install: Install ulockmgr_server. - debian/{rules,libfuse2.install,fuse-utils.lintian}: Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. This allows mounting ntfs filesystems in /etc/fstab. (Debian #452412) - debian/{rules,fuse-utils.postinst}: Install fusermount with 4755 permissions (remaining change from "Dynamic foreground user access"). - debian/fuse-utils.postinst: + Don't fail if udev is running and /dev/fuse does not exist. (Forwarded to Debian #505685) - debian/fuse-utils.preinst: + Remove the module configuration file on upgrade if unmodified. + Remove old rules file if unchanged	Michael Bienia	2.8.1-1.1ubuntu1	14 years ago
39	* debian/fuse-utils.initramfs-hook: * debian/fuse-utils.initramfs-hook: - use manual_add_modules not force_load; fuse will be loaded automatically if necessary (it's a built-in in Ubuntu anyway)	Scott James Remnant	2.7.4-1.1ubuntu4.2	14 years ago
38	* debian/fuse-utils.postinst: * debian/fuse-utils.postinst: - do not fail if udev can not be reloaded (LP: #444979)	Michael Vogt	2.7.4-1.1ubuntu4.1	14 years ago
37	* debian/fuse-utils.modprobe: Drop, we'll build this module ... * debian/fuse-utils.modprobe: Drop, we'll build this module into the kernel and do this with the other kernel filesystems * debian/fuse-utils.preinst: Remove on upgrade if unmodified * debian/rules: Update * debian/fuse-utils.install: Update * debian/fuse-utils-udeb.install: Update * debian/fuse-utils.postinst: Only try to load if it's still a module, remove from /etc/modules anyway	Scott James Remnant	2.7.4-1.1ubuntu4	15 years ago
36	drop makedev from dependencies, we never used it anyway drop makedev from dependencies, we never used it anyway	Oliver Grawert	2.7.4-1.1ubuntu3	15 years ago
35	* debian/rules: Install udev rules into /lib/udev/rules.d * debian/rules: Install udev rules into /lib/udev/rules.d * debian/fuse-utils.install: Update path * debian/fuse-utils.preinst: Remove old rules file if unchanged. * debian/control: Add Breaks to ensure right version of udev is used.	Scott James Remnant	2.7.4-1.1ubuntu2	15 years ago
34	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - Use udev rules instead of init script: + Add debian/45-fuse.rules: Put /dev/fuse into group fuse. + Add debian/fuse-utils.modprobe: Mount/Umount fusectl fs on module loading/unloading. + debian/fuse-utils.postinst: Load fuse module and add it to /etc/modules, so that it is loaded at boot time. + debian/rules, debian/fuse-utils.install: Don't install the init script; install the udev rule and the module configuration file instead. + (Not forwarded to Debian; lots of effort for a questionably small boot speed improvement, and will be obsolete with proper upstart scripts.) - debian/fuse-utils.install: Install ulockmgr_server. - debian/fuse-utils.postinst: Don't fail if udev is running and /dev/fuse does not exist. (Forwarded to Debian #505685) - debian/{rules,libfuse2.install,fuse-utils.lintian}: Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. This allows mounting ntfs filesystems in /etc/fstab. (Debian #452412) - Create libfuse2-udeb and fuse-utils-udeb. (Forwarded to Debian #505697) - initramfs support, for booting from ntfs-3g in wubi: + debian/fuse-utils.initramfs-hook: Copy /sbin/mount.fuse and the fuse kernel module into the initramfs. + debian/rules: Install above file into fuse-utils. + debian/fuse-utils.postinst: Call update-initramfs. + (Forwarded to Debian #505691) - Dynamic foreground user access: (Ubuntu specific until Debian uses ACL-enabled hal) + debian/fuse-utils.postinst: Keep /bin/fusermount as world executable. It already bails out correctly if the user does not have access to /dev/fuse; no reason to control access to it in two different places, and the permissions of the binary can't be changed in a flexible way. + Add debian/10-fuse-permissions.fdi: Enable hal's dynamic ACL management for /dev/fuse, so that local foreground consoles will have access to it. + debian/fuse-utils.install: Install FDI.	Martin Pitt	2.7.4-1.1ubuntu1	15 years ago
33	* debian/fuse-utils.postinst: Install /bin/fusermount as wor... * debian/fuse-utils.postinst: Install /bin/fusermount as world executable. it already bails out correctly if the user does not have access to /dev/fuse; no reason to control access to it in two different places (and the permissions of the binary can't be changed in a flexible way). * Add debian/10-fuse-permissions.fdi: Enable hal's dynamic ACL management for /dev/fuse, so that local foreground consoles will have access to it. Install it in debian/fuse-utils.install. * Drop debian/fuse-utils-needs-users-added-to-fuse-group.update-notifier and its installation in the postinst, it's not really relevant any more. * See intrepid-device-permissions spec for details.	Martin Pitt	2.7.3-4ubuntu2	15 years ago
32	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Don't install the init script; install the udev rule and the module configuration file instead. - debian/45-fuse.rules: set /dev/fuse group to fuse. - debian/fuse-utils.modprobe: module configuration file that mounts the control filesystem when fuse is loaded and unmounts it when fuse is unloaded, along with checking that the control FS is mounting before unmounting it. - debian/fuse-utils.install: add the udev rule, the module configuration file, and ulockmgr_server. - Load fuse on install, and set it so it gets loaded on reboot. - Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. - Create libfuse2-udeb and fuse-utils-udeb. - Copy /sbin/mount.fuse and the fuse kernel module into the initramfs.	Oliver Grawert	2.7.3-4ubuntu1	15 years ago
31	* add update-notifier message about required fuse group memb... * add update-notifier message about required fuse group membership * use /bin/sh in fuse-utils.postinst instead of /bin/bash	Oliver Grawert	2.7.2-1ubuntu2	16 years ago
30	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Don't install the init script; install the udev rule and the module configuration file instead. - debian/45-fuse.rules: set /dev/fuse group to fuse. - debian/fuse-utils.modprobe: module configuration file that mounts the control filesystem when fuse is loaded and unmounts it when fuse is unloaded, along with checking that the control FS is mounting before unmounting it. - debian/fuse-utils.install: add the udev rule, the module configuration file, and ulockmgr_server. - Load fuse on install, and set it so it gets loaded on reboot. - Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. - Create libfuse2-udeb and fuse-utils-udeb. - Copy /sbin/mount.fuse and the fuse kernel module into the initramfs.	Colin Watson	2.7.2-1ubuntu1	16 years ago
29	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Don't install the init script; install the udev rule and the module configuration file instead. - debian/45-fuse.rules: set /dev/fuse group to fuse. - debian/fuse-utils.modprobe: module configuration file that mounts the control filesystem when fuse is loaded and unmounts it when fuse is unloaded, along with checking that the control FS is mounting before unmounting it. - debian/fuse-utils.install: add the udev rule, the module configuration file, and ulockmgr_server. - Load fuse on install, and set it so it gets loaded on reboot. - Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. - Create libfuse2-udeb and fuse-utils-udeb. - Copy /sbin/mount.fuse and the fuse kernel module into the initramfs.	Colin Watson	2.7.1-2ubuntu1	16 years ago
28	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Don't install the init script; install the udev rule and the module configuration file instead. - debian/45-fuse.rules: set /dev/fuse group to fuse. - debian/fuse-utils.modprobe: module configuration file that mounts the control filesystem when fuse is loaded and unmounts it when fuse is unloaded, along with checking that the control FS is mounting before unmounting it. - debian/fuse-utils.install: add the udev rule, the module configuration file, and ulockmgr_server. - Load fuse on install, and set it so it gets loaded on reboot. - Move fusermount and ulockmgr_server to /bin and associated libraries to /lib. - Create libfuse2-udeb and fuse-utils-udeb. - Copy /sbin/mount.fuse and the fuse kernel module into the initramfs.	Colin Watson	2.7.1-1ubuntu1	16 years ago
27	Add udeb shlibs entries. Add udeb shlibs entries.	Colin Watson	2.7.0-1ubuntu5	16 years ago
26	Copy the fuse kernel module into the initramfs. Copy the fuse kernel module into the initramfs.	Colin Watson	2.7.0-1ubuntu4	16 years ago
25	Copy /sbin/mount.fuse into the initramfs. Copy /sbin/mount.fuse into the initramfs.	Colin Watson	2.7.0-1ubuntu3	16 years ago

Older »