==========================================================Ubuntu Security Notice USN-892-1           January 28, 2010
fuse vulnerability
CVE-2009-3297
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  fuse-utils                      2.4.2-0ubuntu3.1

Ubuntu 8.04 LTS:
  fuse-utils                      2.7.2-1ubuntu2.1

Ubuntu 8.10:
  fuse-utils                      2.7.3-4ubuntu2.1

Ubuntu 9.04:
  fuse-utils                      2.7.4-1.1ubuntu4.0.9.04.1

Ubuntu 9.10:
  fuse-utils                      2.7.4-1.1ubuntu4.3

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Ronald Volgers discovered that FUSE did not correctly check mount
locations.  A local attacker, with access to use FUSE, could unmount
arbitrary locations, leading to a denial of service.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    15537 bf9aa08655445acdf89aa3ea8cfa6637
          Size/MD5:      691 e619ae72e2b6d03d0e38acbc878f45e7
          Size/MD5:   384993 6e3d9a580c45ddf4a06558c135c158c2

  Architecture independent packages:

          Size/MD5:    94010 114f6e8a59193e4f8884143b08d861e4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    79360 8a0c7f50fcaac0a88aee238c8050077a
          Size/MD5:    44960 77260c2b96a68935070ffe6755dbaff0
          Size/MD5:    50954 4bafc55f0a6ad974998605dd586d1f88

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    73868 79e054e0bc0f0c16d14dd5a3543d4c63
          Size/MD5:    41312 2b477018cdd37af4dc76bb5ff877ad6f
          Size/MD5:    49780 20cddefa871fdd32d1b87952ec34a57f

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    79584 77c322112ded6bbc48c0149aaaccf163
          Size/MD5:    43520 cef0858cf7518cf339c712a98e50c804
          Size/MD5:    50222 64d0ef1ffef656986bf75fc688e95674

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    75702 3eb72cfd906c56323f588a5037096761
          Size/MD5:    41290 6992f12803377a85283f1bf724c00175
          Size/MD5:    49940 a3c75879caaa5f96543c4c201fbe62f0

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:    20401 7b100165372e6a60437f601257213767
          Size/MD5:      954 1b8a6f337e4e63a29a7b94a5a96d17af
          Size/MD5:   505855 813782a4f23211386c1ea91dc0ac7ded

  Architecture independent packages:

          Size/MD5:   190876 a5a6814e675571993ab1331d8253aba6

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    19166 fe84a1a79b758510961b05f3dd1265df
          Size/MD5:    22444 0370842bdae227f32800d56da35f4c91
          Size/MD5:   164814 046763da0bcec445d6b4bed08fbfdf7b
          Size/MD5:    55272 8e3e2f5c874af9d2885a776859e201ae
          Size/MD5:   130704 245bfc42d3de30eeb808b5a1f4afe287

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    17446 07c8abd9f940d13111f6fccde52b6f79
          Size/MD5:    20732 738ccf9b95d77005c29c40e41571f3b0
          Size/MD5:   154978 5ed102041d49f216f7d9c69b839bd10e
          Size/MD5:    49776 e7b06ebd62e3b2d7b1d708d43663fd22
          Size/MD5:   124762 760a6a30a5ee969296bda0b2a060b3d9

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    17526 3356cc0233455a6c6ba4fc3603f0deb1
          Size/MD5:    20802 71a9d220466e876aa553249071e775b9
          Size/MD5:   154644 99a4e39878581cb67382d3a050389344
          Size/MD5:    48784 bbbbb792b886b3b9aaea149a8e1621cb
          Size/MD5:   123842 681f44cac7f71555cc210d243cb05497

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    20032 51701c483f8cdff2ff61750c02975dd3
          Size/MD5:    23400 9d80e2b93abe1ebf4e029484a8d25abe
          Size/MD5:   163282 38cd262d168ffa128bc6a281c77078e9
          Size/MD5:    55862 0cf2a5327040e50852c898e1a12b7fe2
          Size/MD5:   131216 0bc1a4df4da67ea609a0f702560c4cb5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    17808 bdc6ef0ccc355ef292194fceff7a4c40
          Size/MD5:    21100 fcfc33bf7bcd146e454b48ffa8e03492
          Size/MD5:   154880 ab36d834085ff239249182c641fb1157
          Size/MD5:    45166 43e831102bd1b6485a1289404397a819
          Size/MD5:   120512 e6771adcf4f8d0f80dfa601a4f43f547

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:    21058 3452d0e1e271d74488ef5c7a15c256f2
          Size/MD5:     1338 4156d212d0e7ac60b0bc96e24effb3dd
          Size/MD5:   506362 98563fc7b265b7479a3178181cbcf59a

  Architecture independent packages:

          Size/MD5:   192502 cb2da025362f91239e00624631da0f6d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    19458 042f1e4626477cd5bee939c008ccc6e2
          Size/MD5:    22742 cac54934f1e4d45b8fcbb77db3f059f0
          Size/MD5:   166738 19d8f1e3d4aa6254bb31d6c9f13e5e75
          Size/MD5:    56632 8c67c915a8395ba3a47a9c43038e355f
          Size/MD5:   132848 df868b907e7f04bc3508d7e0d91d3d5c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    17518 106d9b7b2d76d0e6874a9d5eb52c4bdc
          Size/MD5:    20728 ad004441cbd64f7459840dc92ead3241
          Size/MD5:   157480 b31ef98ee4b750be01cc536f70c91751
          Size/MD5:    51738 98d84db3af594bfdb42e129ce74a15fc
          Size/MD5:   127760 ed8c52e8acaf9e56652a23468105daf3

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    17282 cb4300c5d52736dc1020d3f7b7cf2dd5
          Size/MD5:    20556 9fa0400c0cb003bec5644d018601117a
          Size/MD5:   157172 fca11e46fc437baee6c1109defe1fbbd
          Size/MD5:    50728 d28a9edda26c674daf0a03b8938a8305
          Size/MD5:   126766 040dfd6d158c43bb4aa5cd1cf298f397

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    19178 4b09b30d7b017fd3bb12fffd1fd84736
          Size/MD5:    22428 3fa1ebed77f32380f1e791c1d5aebbfe
          Size/MD5:   166340 abe37aa878af21224b29113aa6daaa98
          Size/MD5:    57290 3d7221923befbdd4e15595ec770b4e25
          Size/MD5:   133542 71686749738c99ccbfbf132758edb890

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    18030 94170380cc7849242e922c8a34c4c7b4
          Size/MD5:    21278 bd89612c7b0218ff67970d11c77e53d6
          Size/MD5:   157324 9c0c836473ae78f555d58400bff87cde
          Size/MD5:    46878 599f3de56d920bb7a4fd42383bf9b108
          Size/MD5:   122720 69388103899240dac0714ff7768f1171

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:    21374 d501f0708fb9d3f952d777b9cbe15ea1
          Size/MD5:     1361 3fc2a635b8c65feab5a4b56b6a6dd796
          Size/MD5:   506658 4879f06570d2225667534c37fea04213

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    19250 b192d45c2522528eba2a6c275f15bcde
          Size/MD5:    23048 7f945a3e391d829ccdcfb01b4cc99541
          Size/MD5:   167872 42e6c7dc130e1810c044632cf733726c
          Size/MD5:    56658 49512104c3f9eb5fb5afe036be799718
          Size/MD5:   134048 8c699f249d7bddd89c69b95772423e3a

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    17266 d248a3ec760e5dae82cb3d9224baa823
          Size/MD5:    21054 14551813b14085713889438fc04e7b12
          Size/MD5:   158606 2a74f6fbc0973de6d801667f0cf73b0a
          Size/MD5:    51796 e1fb79ef772adf8823cbb8d88f50c8aa
          Size/MD5:   128928 a5dfdd895cfb5b7b61dafa2a2f0199a8

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    17090 f21bbc2041aa998a3f9ab0853f266831
          Size/MD5:    20814 b3c613b9dbe9f41dd2bfa03ee21b7ecf
          Size/MD5:   158290 c40af5dbee5297f3ed9f5f25a4ddee95
          Size/MD5:    50728 0a0b41b89b30b28396a329f37bd71122
          Size/MD5:   127858 0e773271d099ebe8c398b5d346904926

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    18990 bbde80236d87624c4fef499467f048ca
          Size/MD5:    22750 9687fffb2f72387f631339a219082dd8
          Size/MD5:   167456 90b90c2f096e3a711de43d6f6a69a262
          Size/MD5:    57280 cd3b52cf5d85a012fcac10e078e6b736
          Size/MD5:   134646 003501c87a35ce0b944e04541666cf56

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    17812 945c6dd08aaa408f11f277e20fd12e7b
          Size/MD5:    21552 49d236ef4f94f99253c8fca84e66c778
          Size/MD5:   158430 d702d44a38ed88d65a7023e7cd63a574
          Size/MD5:    46812 f2b5749474b36c3ee96415fe6e29fc85
          Size/MD5:   123774 782fc50c8e7503ade1053db314d3b95b

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:    21441 04cc99102f3c397e2027d9714a22c6cb
          Size/MD5:     1333 e54c9a2e4a6706801da7126dd83c9b71
          Size/MD5:   506658 4879f06570d2225667534c37fea04213

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    19472 bd46963501262b12b99489b7e5bc7985
          Size/MD5:    23282 3346abedaa90ad476070f75c9c02ef7d
          Size/MD5:   168674 35a80a1fbe61be753a4bfc9da4e91c66
          Size/MD5:    57034 3ca9476b2c5190a6776724427b5a1f1a
          Size/MD5:   134484 3f11666298cd6f073b6877dc174a9bfa

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    17492 b8884b8345e94a06895cc61fb3547f44
          Size/MD5:    21280 efebfd3681546b46f1c8bebe51ec3106
          Size/MD5:   158734 3bd7a08ea8f50a3ca8763127716fdf67
          Size/MD5:    52190 4014b2d2dc39d15963015fdc4fbfb47b
          Size/MD5:   129416 559304fe2aa7bb3250e63fbef8537b5b

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    17218 35657a6098145e5db519c34fc8975ac9
          Size/MD5:    20946 c75854e4384b96a6d23f48fe00472316
          Size/MD5:   158880 8c7f019a0048dffb2838345f207faecc
          Size/MD5:    51480 7dce67d415b296d0f83f860c03f8b3d3
          Size/MD5:   128740 e587fa470f69d010bd7d5a1f33d0cc56

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    19124 fb878094d150140616889f32b58d6619
          Size/MD5:    22868 6aae39d077eafdef9f41bfb35103cb50
          Size/MD5:   167340 0e2a7bd1658e3a7b1eca0dc38aad4549
          Size/MD5:    55300 b960c141afb7640b90292c5d00ecf2d4
          Size/MD5:   132678 7cbe4af9c6a3207c565e72ebbb5fb8ee

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    18024 ea644cec270ed8774eba82d135a26e02
          Size/MD5:    21752 ca2e8a511529efaa70b5985e4f12acdf
          Size/MD5:   158302 709ed8179ca8e91a0ecad47bc43e1a63
          Size/MD5:    46794 ecd6bb837a304816dc5a8563bdeb6d13
          Size/MD5:   123798 60734373a5f0cf933c3c6b82c45029a7