diff options
| author |  Nikolaus Rath <Nikolaus@rath.org> | 2018-07-18 20:35:46 +0100 |
|---|---|---|
| committer | Nikolaus Rath <Nikolaus@rath.org> | 2018-07-24 07:39:25 +0100 |
| commit | 237147e6e09bec52145e9a25a46aff36ac4459da (patch) | |
| tree | a1244b2ed4d950f9aa3b29a3030a0eae7b940df4 /ChangeLog.rst | |
| parent | 055fcec831aff1037f5240f50481827b847f8cfa (diff) | |
Added ChangeLog entry for hardening patches.
Diffstat (limited to 'ChangeLog.rst')
| -rw-r--r-- | ChangeLog.rst | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/ChangeLog.rst b/ChangeLog.rst index 9ba0263..10ab5ad 100644 --- a/ChangeLog.rst +++ b/ChangeLog.rst @@ -1,6 +1,10 @@ -libfuse 3.2.5 -========================== +Unreleased Changes +================== +* The fusermount binary has been hardened in several ways to reduce + potential attack surface. Most importantly, mountpoints and mount + options must now match a hard-coded whitelist. It is expected that + this whitelist covers all regular use-cases. * Added a test of `seekdir` to test_syscalls. * Fixed `readdir` bug when non-zero offsets are given to filler and the filesystem client, after reading a whole directory, re-reads it from a |