Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Fedora: 2016-7b9a2fe987 moderate: ecryptfs-utils privilege escalation

fedora
Calendar Grey February 17, 2016
Dist Fedora Esm H88
A security patch for ecryptfs-utils on Fedora 22 resolves issues related to privilege escalation and enhances the effectiveness of static analysis.
- manpage ecryptfs-migrate-home.8: Fix typos - clang static analysis fixes - Refuse to mount over non-standard filesystems.

Summary

eCryptfs is a stacked cryptographic filesystem that ships in Linux

kernel versions 2.6.19 and above. This package provides the mount

helper and supporting libraries to perform key management and mount

functions.

Install ecryptfs-utils if you would like to mount eCryptfs.

Update Information:

- manpage ecryptfs-migrate-home.8: Fix typos - clang static analysis fixes - Refuse to mount over non-standard filesystems.

Topics%20covered

Topics Covered

security advisory update Fedora privilege escalation security fix filesystem eCryptfs

Change Log

References


[ 1 ] Bug #1300595 - CVE-2016-1572 ecryptfs-utils: privilege escalation by mounting over /proc/$pid [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1300595 [ 2 ] Bug #1301239 - ecryptfs-utils-109.orig is available https://bugzilla.redhat.com/show_bug.cgi?id=1301239

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update ecryptfs-utils' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: ecryptfs-utils
Product: Fedora 22
Version: 109
Release: 1.fc22
URL: https://launchpad.net/ecryptfs
Summary: The eCryptfs mount helper and support libraries

Topics%20covered

Topics Covered

security advisory update Fedora privilege escalation security fix filesystem eCryptfs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.