Advisory ROSA-SA-2021-1837

Software: fuse 2.9.2
OS: Cobalt 7.9

CVE-ID: CVE-2015-3202
CVE-Crit: HIGH
CVE-DESC: fusermount in FUSE before 2.9.3-15 incorrectly clears the environment before calling (1) mount or (2) umount as root user, which allows local users to write arbitrary files via a created environment variable LIBMOUNT_MTAB, which is a mount debugging function.
CVE-STATUS: default
CVE-REV: default

CVE-ID: CVE-2019-14860
CVE-Crit: MEDIUM
CVE-DESC: It was discovered that the Syndesis configuration for resource sharing between sources was enabled for all sources. An attacker could exploit this lack of protection to conduct phishing attacks and further access unauthorized information.
CVE-STATUS: Default
CVE-REV: Default