ecryptfs-utils 68-1+lenny1 source package in Debian

Changelog

ecryptfs-utils (68-1+lenny1) oldstable-security; urgency=low


  * Non-maintainer upload by the security team.
  * Various security fixes in src/utils/mount.ecryptfs_private.c:
    - chdir into mountpoint before checking permissions in (CVE-2011-1831,
      CVE-2011-1832)
    - modify mtab via a temp file first and make sure it succeeds before
      replacing the real mtab (CVE-2011-1834)
    - make sure we don't copy into a user controlled directory (CVE-2011-1835)
    - also set gid and umask before updating mtab (CVE-2011-3145)

 -- Jonathan Wiltshire <email address hidden>  Fri, 06 Jan 2012 20:36:51 +0000