{"action":"Upgrade ecryptfs-utils to 92-1 or later.","affected":[{"fixed":"92-1","introduced":"0"}],"component":"ecryptfs-utils","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["92-1"],"id":"tcs_01M5N9V0JKCJYX4HN10M3JA2N3","modified_at":"2026-10-23T18:03:44.373462826Z","published_at":"2019-04-22T16:29:00.287Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-3145","https://security-tracker.debian.org/tracker/CVE-2011-3145"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-3145","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-3145"}],"summary":"When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of th"}