portage-ng / portage / sys-fs / fuseiso / 20070708-r3
version « ‹ 20070708-r3 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference sys-fs/fuseiso · none place version 20070708-r3 in a vulnerable range
▸ GLSA 202007-20 fuseiso: Multiple vulnerabilities this version unaffected normal remote 2020-07-27

Multiple vulnerabilities have been found in fuseiso, the worst of which could result in the arbitrary execution of code.

Announced
2020-07-27
Revised
2020-07-27
Access
remote
Bugs
#713328
Advisory
https://security.gentoo.org/glsa/202007-20

Affected packages

PackageArchVulnerableUnaffected
sys-fs/fuseiso*< 20070708-r3>= 20070708-r3

Background

FuseISO is a FUSE module to mount ISO filesystem images (.iso, .nrg, .bin, .mdf and .img files).

Description

Multiple vulnerabilities have been discovered in fuseiso. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted ISO file using fuseiso, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All fuseiso users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-fs/fuseiso-20070708-r3"

References