Accepted ecryptfs-utils 83-4+squeeze1 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 04 Jan 2012 22:01:03 +0000
Source: ecryptfs-utils
Binary: ecryptfs-utils ecryptfs-utils-dbg libecryptfs0 libecryptfs-dev
Architecture: source amd64
Version: 83-4+squeeze1
Distribution: stable-security
Urgency: low
Maintainer: Daniel Baumann <daniel@lists.debian-maintainers.org>
Changed-By: Jonathan Wiltshire <jmw@debian.org>
Description:
ecryptfs-utils - ecryptfs cryptographic filesystem (utilities)
ecryptfs-utils-dbg - ecryptfs cryptographic filesystem (utilities; debug)
libecryptfs-dev - ecryptfs cryptographic filesystem (development)
libecryptfs0 - ecryptfs cryptographic filesystem (library)
Changes:
ecryptfs-utils (83-4+squeeze1) stable-security; urgency=low
.
* Non-maintainer upload by the security team.
* Various security fixes:
- debian/patches/CVE-2011-1831,1832,1834.patch: chdir into mountpoint
before checking permissions in src/utils/mount.ecryptfs_private.c.
(CVE-2011-1831, CVE-2011-1832)
- debian/patches/CVE-2011-1831,1832,1834.patch: modify mtab via a temp
file first and make sure it succeeds before replacing the real mtab
in src/utils/mount.ecryptfs_private.c. (CVE-2011-1834)
- debian/patches/CVE-2011-1835.patch: make sure we don't copy into a
user controlled directory in src/utils/ecryptfs-setup-private.
(CVE-2011-1835)
- debian/patches/CVE-2011-1837.patch: verify permissions with a file
descriptor, and don't follow symlinks in
src/utils/mount.ecryptfs_private.c. (CVE-2011-1837)
- debian/patches/CVE-2011-3145.patch: also set gid and umask before
updating mtab in src/utils/mount.ecryptfs_private.c. (CVE-2011-3145)
Checksums-Sha1:
56914f6bb1ef4f6536d969886942fd9a61aa5fc6 2372 ecryptfs-utils_83-4+squeeze1.dsc
ab82032679c60bfc702dc339b2c9d506ace0dc34 548235 ecryptfs-utils_83.orig.tar.gz
8a1ae87b6f9915cd57c41951ae228810933ff468 11962 ecryptfs-utils_83-4+squeeze1.diff.gz
e5acbd63748ef65c0c55be3e7f4b4e00c5f55815 103808 ecryptfs-utils_83-4+squeeze1_amd64.deb
5dce94a020218a8a0ebb67bce0b616cfc8bc7e5c 161964 ecryptfs-utils-dbg_83-4+squeeze1_amd64.deb
bb8e2f8eaa2a77537b66fdc690c0541c600699fa 69228 libecryptfs0_83-4+squeeze1_amd64.deb
aaaba34da8ae78fa781a29b5d599f560644c0ae1 62612 libecryptfs-dev_83-4+squeeze1_amd64.deb
Checksums-Sha256:
cb04980ea37950489809e54beaa076326a0521e73223852e9bc30201f87e2667 2372 ecryptfs-utils_83-4+squeeze1.dsc
ede721fa2dba9cb3dadf89e5a21c555be35fa031abd841073fcc6f92e3b29dee 548235 ecryptfs-utils_83.orig.tar.gz
1725c4235b97e8c58734fac12264c6b40fc13541ecf4bc8c4c3b491d7f2a6d11 11962 ecryptfs-utils_83-4+squeeze1.diff.gz
86cebb06539df0130df20f1f24e7328bfc3ef18363e4e5749b4a533474a077fe 103808 ecryptfs-utils_83-4+squeeze1_amd64.deb
6d906edd9b0d9d06b07f5a617e6ca6b12f3bdb55d35bcb2b812a294076a8137d 161964 ecryptfs-utils-dbg_83-4+squeeze1_amd64.deb
1e8c0551f5a8c04f2d883214d99e55ccc9d1d899fb328d66abbe2635830a8efe 69228 libecryptfs0_83-4+squeeze1_amd64.deb
17ba5c2fa975a4ef4c5a99132b50d105c8c3d53a1c0db6b0688c830441dcaae9 62612 libecryptfs-dev_83-4+squeeze1_amd64.deb
Files:
9aee8bc29c33436208b75d6a149b3482 2372 misc optional ecryptfs-utils_83-4+squeeze1.dsc
1c97d96437d62921744647d4157a8f3e 548235 misc optional ecryptfs-utils_83.orig.tar.gz
ea593f9154f84840bc1e6659f2bee3c9 11962 misc optional ecryptfs-utils_83-4+squeeze1.diff.gz
697ba950c7863a5f8880f2b2b0a425a8 103808 misc optional ecryptfs-utils_83-4+squeeze1_amd64.deb
6b92eda1c961c9370a0f839c17d05edb 161964 debug extra ecryptfs-utils-dbg_83-4+squeeze1_amd64.deb
1b01e8d24b483c7d33c911c0d1c47c32 69228 libs optional libecryptfs0_83-4+squeeze1_amd64.deb
5cdb02d7780e084905e15d8b484624e3 62612 libdevel optional libecryptfs-dev_83-4+squeeze1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=yIfa
-----END PGP SIGNATURE-----
Accepted:
ecryptfs-utils-dbg_83-4+squeeze1_amd64.deb
to main/e/ecryptfs-utils/ecryptfs-utils-dbg_83-4+squeeze1_amd64.deb
ecryptfs-utils_83-4+squeeze1.diff.gz
to main/e/ecryptfs-utils/ecryptfs-utils_83-4+squeeze1.diff.gz
ecryptfs-utils_83-4+squeeze1.dsc
to main/e/ecryptfs-utils/ecryptfs-utils_83-4+squeeze1.dsc
ecryptfs-utils_83-4+squeeze1_amd64.deb
to main/e/ecryptfs-utils/ecryptfs-utils_83-4+squeeze1_amd64.deb
libecryptfs-dev_83-4+squeeze1_amd64.deb
to main/e/ecryptfs-utils/libecryptfs-dev_83-4+squeeze1_amd64.deb
libecryptfs0_83-4+squeeze1_amd64.deb
to main/e/ecryptfs-utils/libecryptfs0_83-4+squeeze1_amd64.deb