UbuntuUpdates.org

Package "libpam-fscrypt"

Name: libpam-fscrypt

Description:

PAM module for Linux filesystem encryption
Latest version: 0.2.2-0ubuntu2.1
Release: bionic (18.04)
Level: security
Repository: universe
Head package: fscrypt
Homepage: https://github.com/google/fscrypt

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libpam-fscrypt"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libpam-fscrypt" in Bionic

Repository Area Version
updates universe 0.2.2-0ubuntu2.1

Changelog

Version: 0.2.2-0ubuntu2.1 2018-08-24 05:06:36 UTC

  fscrypt (0.2.2-0ubuntu2.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Privilege escalation via improperly restored
    supplementary groups in libpam-fscrypt (LP: #1787548)
    - CVE-2018-6558.patch: Save the euid, egid, and supplementary groups when
      entering the PAM module, drop privileges to perform actions on behalf of
      the user, and then properly restore the saved values before exiting the
      PAM module. Based on patch from upstream.
    - CVE-2018-6558
  * 0001-security-drop-and-regain-privileges-in-all-threads.patch: Drop and
    regain privileges in all threads of the current process
  * 0001-Ensure-keyring-privilege-changes-are-reversible.patch: Ensure keyring
    privilege changes are reversible to prevent failures when, for example,
    "su <user>" is executed as an unprivileged user

 -- Tyler Hicks <email address hidden> Wed, 22 Aug 2018 18:57:26 +0000
1787548 PAM fscrypt adds root(0) group to all users called by su
CVE-2018-6558 privilege escalation


About   -   Send Feedback to @ubuntu_updates