Red Hat ENTERPRISE 5.4 RELEASE NOTES, Manual

Page: 67 / 466

ecryptfs-utils
49
inconsistencies after an unclean shutdown), mke4fs (used to initialize a partition to contain an empty
ext4 file system), tune4fs (used to modify file system parameters), and most other core ext4fs file
system utilities.
Important
this package is now designed and intended to be installed alongside the original e2fsprogs
package in Red Hat Enterprise Linux. As such, certain binaries in the e4fsprogs package
have been given new names. For example, the utility that checks ext4 file systems for
consistency has been renamed to "e4fsck", thus allowing the original "e2fsck" program
from the e2fsprogs package to coexist on the same system. (
BZ#485316
268
)
Notably, this updated e4fsprogs package includes a fix for the following bug:
• invoking the "stats" command while at the "debuge4fs" prompt could cause "debuge4fs" to
segmentation fault due to a missing check to see whether the file system was currently open. This
has been fixed in this updated package so that calling "stats" is now safe. (
BZ#482894
269
)
All users of e4fsprogs are advised to upgrade to this updated package, which resolves this issue.
1.46. ecryptfs-utils
1.46.1. RHSA-2009:1307: Low security, bug fix, and enhancement
update
Updated ecryptfs-utils packages that fix a security issue, various bugs, and add enhancements are
now available for Red Hat Enterprise Linux 5.
This update has been rated as having low security impact by the Red Hat Security Response Team.
eCryptfs is a stacked, cryptographic file system, transparent to the underlying file system and provides
per-file granularity.
eCryptfs is released as a Technology Preview for Red Hat Enterprise Linux 5.4. These updated
ecryptfs-utils packages have been upgraded to upstream version 75, which provides a number of bug
fixes and enhancements over the previous version. In addition, these packages provide a graphical
program to help configure and use eCryptfs. To start this program, run the command:
ecryptfs-mount-helper-gui
Important: the syntax of certain eCryptfs mount options has changed. Users who were previously
using the initial Technology Preview release of ecryptfs-utils are advised to refer to the ecryptfs(7) man
page, and to update any affected mount scripts and /etc/fstab entries for eCryptfs file systems.
A disclosure flaw was found in the way the "ecryptfs-setup-private" script passed passphrases to the
"ecryptfs-wrap-passphrase" and "ecryptfs-add-passphrase" commands as command line arguments.
A local user could obtain the passphrases of other users who were running the script from the process
listing. (
CVE-2008-5188
270
)
270
https://www.redhat.com/security/data/cve/CVE-2008-5188.html