tocsin

Debian/encfs: high 7.5

The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".

Action: Upgrade encfs to 1.8.1-1 or later.

Affected

introducedfixedlast affected
01.8.1-1-

Fixed versions

1.8.1-1

Sources

published · modified · JSON