Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Ubuntu 16.04 LTS: USN-3032-1 Moderate eCryptfs Sensitive Data Exposure

ubuntu
Calendar Grey July 14, 2016
Scroller Ubuntu
The Ubuntu Security Announcement USN-3032-1 highlights a critical vulnerability in eCryptfs that poses risks to confidential information, necessitating prompt measures for remediation.
eCryptfs could be made to expose sensitive information.

Summary

eCryptfs could be made to expose sensitive information.

Software Description:

- ecryptfs-utils: eCryptfs cryptographic filesystem utilities

Details:

It was discovered that eCryptfs incorrectly configured the encrypted swap

partition for certain drive types. An attacker could use this issue to discover

sensitive information.

Topics%20covered

Topics Covered

security advisory Ubuntu sensitive information info disclosure eCryptfs

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  ecryptfs-utils                  111-0ubuntu1.1

Ubuntu 15.10:
  ecryptfs-utils                  108-0ubuntu1.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://bugs.launchpad.net/ecryptfs/+bug/1597154

July 14, 2016

Topics%20covered

Topics Covered

security advisory Ubuntu sensitive information info disclosure eCryptfs

Package Information

https://launchpad.net/ubuntu/+source/ecryptfs-utils/111-0ubuntu1.1
https://launchpad.net/ubuntu/+source/ecryptfs-utils/108-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.