Описание
Security update for encfs
This update for encfs fixes the following issues:
- A new option --require-macs was added to address CVE-2014-3462 (boo#878257) This will now trigger a warning if MAC headers were disabled via configuration.
In addition, encfs was updated to 1.8.1 including all upstream improvements and fixes.
Список пакетов
openSUSE Leap 42.1
encfs-1.8.1-5.1
encfs-lang-1.8.1-5.1
openSUSE Leap 42.2
encfs-1.8.1-5.1
encfs-lang-1.8.1-5.1
Ссылки
- E-Mail link for openSUSE-SU-2017:0158-1
- SUSE Security Ratings
Описание
The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
Затронутые продукты
openSUSE Leap 42.1:encfs-1.8.1-5.1
openSUSE Leap 42.1:encfs-lang-1.8.1-5.1
openSUSE Leap 42.2:encfs-1.8.1-5.1
openSUSE Leap 42.2:encfs-lang-1.8.1-5.1
Ссылки
- CVE-2014-3462
- SUSE Bug 878257