Ausführen von Code mit höheren Privilegien in ecryptfs-utils
ID: | FEDORA-2016-7b9a2fe987 |
Distribution: | Fedora |
Plattformen: | Fedora 22 |
Datum: | Mi, 17. Februar 2016, 07:01 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1572 |
Applikationen: | eCryptfs |
Originalnachricht |
|
Name : ecryptfs-utils Product : Fedora 22 Version : 109 Release : 1.fc22 URL : https://launchpad.net/ecryptfs Summary : The eCryptfs mount helper and support libraries Description : eCryptfs is a stacked cryptographic filesystem that ships in Linux kernel versions 2.6.19 and above. This package provides the mount helper and supporting libraries to perform key management and mount functions. Install ecryptfs-utils if you would like to mount eCryptfs. -------------------------------------------------------------------------------- Update Information: - manpage ecryptfs-migrate-home.8: Fix typos - clang static analysis fixes - Refuse to mount over non-standard filesystems. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1300595 - CVE-2016-1572 ecryptfs-utils: privilege escalation by mounting over /proc/$pid [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1300595 [ 2 ] Bug #1301239 - ecryptfs-utils-109.orig is available https://bugzilla.redhat.com/show_bug.cgi?id=1301239 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ecryptfs-utils' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce |