Bug 142596 – app-crypt/cfs - integer overflow (CVE-2006-3123)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Carsten Lohrke (RETIRED) 2006-08-02 18:24:47 UTC]

from DSA 1138-1:

Carlo Contavalli discovered an integer overflow in CFS, a cryptographic
filesystem, which allows local users to crash the encryption daemon.

For the stable distribution (sarge) this problem has been fixed in
version 1.4.1-15sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 1.4.1-17.

[Comment 1 Thierry Carrez (RETIRED) 2006-08-12 08:00:11 UTC]

mkennedy, please bump to latest version.

[Comment 2 Sune Kloppenborg Jeppesen (RETIRED) 2006-09-05 06:25:58 UTC]

mkennedy, please bump to latest version.

[Comment 3 Sune Kloppenborg Jeppesen (RETIRED) 2006-09-13 23:29:10 UTC]

-dev mailed for assistance.

[Comment 4 Sune Kloppenborg Jeppesen (RETIRED) 2006-09-19 00:28:32 UTC]

taviso/vapier could you try a bump?

[Comment 5 Sune Kloppenborg Jeppesen (RETIRED) 2006-09-26 09:34:16 UTC]

No response in 6 weeks, I suggest a mask. Security any comments?

[Comment 6 Thierry Carrez (RETIRED) 2006-09-27 12:55:54 UTC]

I wouldn't mask it, sounds more like a bug than a vulnerability anyway...

[Comment 7 Matthew Kennedy (RETIRED) 2006-09-27 20:39:06 UTC]

i updated it

[Comment 8 Matthias Geerdsen (RETIRED) 2006-09-29 04:23:46 UTC]

thanks... closing since it is not stable on any arch