ecryptfs-utils 83-0ubuntu3.2.10.04.1 source package in Ubuntu
Changelog
ecryptfs-utils (83-0ubuntu3.2.10.04.1) lucid-security; urgency=low * SECURITY UPDATE: privilege escalation via mountpoint race conditions (LP: #732628) - src/utils/mount.ecryptfs_private.c: chdir into mountpoint before checking permissions. Patch thanks to Dan Rosenberg. - CVE-2011-1831 - CVE-2011-1832 * SECURITY UPDATE: race condition when checking source during mount (LP: #732628) - src/utils/mount.ecryptfs_private.c: use new ecryptfs_check_dev_ruid kernel option when mounting directory. - CVE-2011-1833 * SECURITY UPDATE: mtab corruption via improper handling (LP: #732628) - src/utils/mount.ecryptfs_private.c: modify mtab via a temp file first and make sure it succeeds before replacing the real mtab. Patch thanks to Dan Rosenberg. - CVE-2011-1834 * SECURITY UPDATE: key poisoning via insecure temp directory handling (LP: #732628) - src/utils/ecryptfs-setup-private: make sure we don't copy into a user controlled directory. - CVE-2011-1835 * SECURITY UPDATE: arbitrary file overwrite via lock counter race condition (LP: #732628) - src/utils/mount.ecryptfs_private.c: verify permissions with a file descriptor, and don't follow symlinks. - CVE-2011-1837 -- Marc Deslauriers <email address hidden> Thu, 04 Aug 2011 10:37:00 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Lucid
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- misc
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
ecryptfs-utils_83.orig.tar.gz | 535.4 KiB | ede721fa2dba9cb3dadf89e5a21c555be35fa031abd841073fcc6f92e3b29dee |
ecryptfs-utils_83-0ubuntu3.2.10.04.1.diff.gz | 18.6 KiB | e555eb8d179efa60a87dbb5bb949f3a12f8ae06329be59ea62b6fac8538d5e7c |
ecryptfs-utils_83-0ubuntu3.2.10.04.1.dsc | 2.2 KiB | 29cc36801fef084cc35a21a1346fb0c7ab53afc3bd3a08a4d12f6ca8c630e0bb |
Available diffs
Binary packages built by this source
- ecryptfs-utils: No summary available for ecryptfs-utils in ubuntu lucid.
No description available for ecryptfs-utils in ubuntu lucid.
- libecryptfs-dev: No summary available for libecryptfs-dev in ubuntu lucid.
No description available for libecryptfs-dev in ubuntu lucid.
- libecryptfs0: No summary available for libecryptfs0 in ubuntu lucid.
No description available for libecryptfs0 in ubuntu lucid.