ELSA-2011-1241

ELSA-2011-1241 - ecryptfs-utils security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2011-08-31

Description

[82-6.3]
- do not forget to set the group id in mount.ecryptfs_private

[82-6.2]
- fix regression in ecryptfs-setup-private

[82-6.1]
- security fixes:
- privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
- race condition when checking source during mount (CVE-2011-1833)
- mtab corruption via improper handling (CVE-2011-1834)
- key poisoning via insecure temp directory handling (CVE-2011-1835)
- arbitrary file overwrite via lock counter race (CVE-2011-1837)

Related CVEs

CVE-2011-1831

CVE-2011-1832

CVE-2011-1834

CVE-2011-1835

CVE-2011-1837

CVE-2011-3145

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	ecryptfs-utils-75-5.el5_7.2.src.rpm	67df1651922008ee7abe8b5ce6bf0f44	-
	ecryptfs-utils-75-5.el5_7.2.i386.rpm	96de0c5e1dcfcec648b77fc64a3c3388	-
	ecryptfs-utils-devel-75-5.el5_7.2.i386.rpm	2b7212d84d10a4353a45d75c5f4d9631	-
	ecryptfs-utils-gui-75-5.el5_7.2.i386.rpm	7014eef7c528821ebd644ba7e01274e8	-
Oracle Linux 5 (ia64)	ecryptfs-utils-75-5.el5_7.2.src.rpm	67df1651922008ee7abe8b5ce6bf0f44	-
	ecryptfs-utils-75-5.el5_7.2.ia64.rpm	c65a9af054171db1f5684cff5ebc7abe	-
	ecryptfs-utils-devel-75-5.el5_7.2.ia64.rpm	33cf9ca2e2489223bb7bd18756d8d73e	-
	ecryptfs-utils-gui-75-5.el5_7.2.ia64.rpm	884642bba88e5b12c5cf258fdee94c80	-
Oracle Linux 5 (x86_64)	ecryptfs-utils-75-5.el5_7.2.src.rpm	67df1651922008ee7abe8b5ce6bf0f44	-
	ecryptfs-utils-75-5.el5_7.2.i386.rpm	96de0c5e1dcfcec648b77fc64a3c3388	-
	ecryptfs-utils-75-5.el5_7.2.x86_64.rpm	f3378baad78ec9814380793ed1401a93	-
	ecryptfs-utils-devel-75-5.el5_7.2.i386.rpm	2b7212d84d10a4353a45d75c5f4d9631	-
	ecryptfs-utils-devel-75-5.el5_7.2.x86_64.rpm	5cde1a4d2274c3d6c9e9fdc1b060680c	-
	ecryptfs-utils-gui-75-5.el5_7.2.x86_64.rpm	1566cd5f33864ab793f00d1b9dbda873	-
Oracle Linux 6 (i386)	ecryptfs-utils-82-6.el6_1.3.src.rpm	354e57b76361951a254f0f66bb00aad2	-
	ecryptfs-utils-82-6.el6_1.3.i686.rpm	a2a8f30f2f399163ee1d60f92402b0c0	-
	ecryptfs-utils-devel-82-6.el6_1.3.i686.rpm	1757200cea283b93cfc38924df103aed	-
	ecryptfs-utils-python-82-6.el6_1.3.i686.rpm	fd247c46b9462f2b0cc80aedff6329fc	-
Oracle Linux 6 (x86_64)	ecryptfs-utils-82-6.el6_1.3.src.rpm	354e57b76361951a254f0f66bb00aad2	-
	ecryptfs-utils-82-6.el6_1.3.i686.rpm	a2a8f30f2f399163ee1d60f92402b0c0	-
	ecryptfs-utils-82-6.el6_1.3.x86_64.rpm	faf038b41875f09c8f8f19b6b04ee5f0	-
	ecryptfs-utils-devel-82-6.el6_1.3.i686.rpm	1757200cea283b93cfc38924df103aed	-
	ecryptfs-utils-devel-82-6.el6_1.3.x86_64.rpm	81cf6a78492a87d8a15527a5893d8061	-
	ecryptfs-utils-python-82-6.el6_1.3.x86_64.rpm	b9857dd3df4d6952d1f02751c2460b40	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team