Stay Secure with the Latest Linux Advisories

security advisorycritical riskdecryption threat

Mageia 8 MGASA-2022-0047 Critical: Cryptsetup Decryption Issue

An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device (CVE-2021-4122). References: . MGASA-2022-0047 - Updated cryptsetup packages fix security vulnerability Publication date: 03 Feb 2022 URL: https://advisories.mageia.org/MGASA-2022-0047.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-4122 An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device (CVE-2021-4122). References: - https://bugs.mageia.org/show_bug.cgi?id=29884 - https://www.openwall.com/lists/oss-security/2022/01/13/2 - https://www.cve.org/CVERecord?id=CVE-2021-4122 SRPMS: - 8/core/cryptsetup-2.3.7-1.mga8 . MGASA-2022-0048 tackles a vulnerability in the systemd package that could enable malicious users to exploit services and escalate privileges.. Mageia Cryptsetup Update, Security Advisory Mageia, Cryptsetup Vulnerability, LUKS Device Risk, Mageia Security Alert. . Severity: Critical. LinuxSecurity.com Team

Feb 03, 2022 •Critical Mageia