fscrypt (0.2.2-0ubuntu2.1) bionic-security; urgency=medium * SECURITY UPDATE: Privilege escalation via improperly restored supplementary groups in libpam-fscrypt (LP: #1787548) - CVE-2018-6558.patch: Save the euid, egid, and supplementary groups when entering the PAM module, drop privileges to perform actions on behalf of the user, and then properly restore the saved values before exiting the PAM module. Based on patch from upstream. - CVE-2018-6558 * 0001-security-drop-and-regain-privileges-in-all-threads.patch: Drop and regain privileges in all threads of the current process * 0001-Ensure-keyring-privilege-changes-are-reversible.patch: Ensure keyring privilege changes are reversible to prevent failures when, for example, "su " is executed as an unprivileged user -- Tyler Hicks Wed, 22 Aug 2018 18:57:26 +0000 fscrypt (0.2.2-0ubuntu2) bionic; urgency=medium * debian/copyright: Add copyright information for pam/constants.go -- Tyler Hicks Mon, 30 Oct 2017 14:43:14 +0000 fscrypt (0.2.2-0ubuntu1) bionic; urgency=medium * Initial release -- Tyler Hicks Fri, 27 Oct 2017 22:14:46 +0000