Bugzilla – Bug 1099267
VUL-0: CVE-2018-12561: cantata: Possible injection of additional mount options by manipulating the domain parameters of the samba URL
Last modified: 2018-06-27 11:09:13 UTC
An issue was discovered in the cantata-mounter D-Bus service in Cantata through
2.3.1. A regular user can inject additional mount options such as file_mode= by
manipulating (for example) the domain parameter of the samba URL.
We don't build with this option.
*** This bug has been marked as a duplicate of bug 1091824 ***