Lucene search

K
suseSuseOPENSUSE-SU-2011:0902-1
HistoryAug 12, 2011 - 9:08 p.m.

ecryptfs-utils: Update to fix various symlink race attacks (important)

2011-08-1221:08:14
lists.opensuse.org
21

0.0004 Low

EPSS

Percentile

5.7%

This update of ecryptfs-utils fixes several security
problems:

  • CVE-2011-1831 - Race condition when checking mountpoint
    during mount.
  • CVE-2011-1832 - Race condition when checking mountpoint
    during unmount.
  • CVE-2011-1833 - Race condition when checking source
    during mount.
  • CVE-2011-1834 - Improper mtab handling allowing
    corruption due to resource limits, signals, etc.
  • CVE-2011-1835 - Key poisoning in ecryptfs-setup-private
    due to insecure temp directory.
  • CVE-2011-1837 - Predictable lock counter name and
    associated races.