LWN.net Logo

Fedora alert FEDORA-2012-11069 (ecryptfs-utils)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 17 Update: ecryptfs-utils-99-1.fc17
Date:  Fri, 03 Aug 2012 11:27:50 +0000
Message-ID:  <20120803112750.E8CDE21588@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-11069 2012-07-24 22:41:04 -------------------------------------------------------------------------------- Name : ecryptfs-utils Product : Fedora 17 Version : 99 Release : 1.fc17 URL : https://launchpad.net/ecryptfs Summary : The eCryptfs mount helper and support libraries Description : eCryptfs is a stacked cryptographic filesystem that ships in Linux kernel versions 2.6.19 and above. This package provides the mount helper and supporting libraries to perform key management and mount functions. Install ecryptfs-utils if you would like to mount eCryptfs. -------------------------------------------------------------------------------- Update Information: - updated to ecryptfs-utils 99 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 24 2012 Michal Hlavinka <mhlavink@redhat.com> - 99-1 - ecryptfs-utils updated to 99 - fixes: suid helper does not restrict mounting filesystems with nosuid, nodev leading to possible privilege escalation (CVE-2012-3409) * Mon Jun 25 2012 Michal Hlavinka <mhlavink@redhat.com> - 97-1 - ecryptfs-utils updated to 97 * Mon Jun 4 2012 Michal Hlavinka <mhlavink@redhat.com> - 96-3 - for file name encryption support check, module must be loaded already * Mon Apr 16 2012 Michal Hlavinka <mhlavink@redhat.com> - 96-2 - when ecryptfs-mount-fails, check if user is member of ecryptfs group -------------------------------------------------------------------------------- References: [ 1 ] Bug #841940 - CVE-2012-3409 ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev leading to possible privilege escalation https://bugzilla.redhat.com/show_bug.cgi?id=841940 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ecryptfs-utils' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds