Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
219
security advisorymoderatesecurity updateRocky Linux 8 RLSA-2022:370 Moderate: Cryptsetup Update Threat
Moderate: cryptsetup security update. \{'type': 'Security', 'shortCode': 'RL', 'name': 'RLSA-2022:370', 'synopsis': 'Moderate: cryptsetup security update', 'severity': 'Moderate', 'topic': 'An update for cryptsetup is now available for Rocky Linux 8.\nRocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.', 'description': 'The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.', 'solution': None, 'affectedProducts': ['Rocky Linux 8'], 'fixes': ['2032401'], 'cves': ['Red Hat:::https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4122.json:::CVE-2021-4122'], 'references': [], 'publishedAt': '2022-02-02T04:36:32.015968Z', 'rpms': ['cryptsetup-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-2.3.3-4.el8_5.1.src.rpm', 'cryptsetup-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-debuginfo-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-debuginfo-2.3.3-4.el8_5.1.i686.rpm', 'cryptsetup-debuginfo-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-debugsource-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-debugsource-2.3.3-4.el8_5.1.i686.rpm', 'cryptsetup-debugsource-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-devel-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-devel-2.3.3-4.el8_5.1.i686.rpm', 'cryptsetup-devel-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-libs-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-libs-2.3.3-4.el8_5.1.i686.rpm', 'cryptsetup-libs-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-libs-debuginfo-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-libs-debuginfo-2.3.3-4.el8_5.1.i686.rpm', 'cryptsetup-libs-debuginfo-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-reencrypt-2.3.3-4.el8_5.1.aarch64.rpm','cryptsetup-reencrypt-2.3.3-4.el8_5.1.x86_64.rpm', 'cryptsetup-reencrypt-debuginfo-2.3.3-4.el8_5.1.aarch64.rpm', 'cryptsetup-reencrypt-debuginfo-2.3.3-4.el8_5.1.x86_64.rpm', 'integritysetup-2.3.3-4.el8_5.1.aarch64.rpm', 'integritysetup-2.3.3-4.el8_5.1.x86_64.rpm', 'integritysetup-debuginfo-2.3.3-4.el8_5.1.aarch64.rpm', 'integritysetup-debuginfo-2.3.3-4.el8_5.1.x86_64.rpm', 'veritysetup-2.3.3-4.el8_5.1.aarch64.rpm', 'veritysetup-2.3.3-4.el8_5.1.x86_64.rpm', 'veritysetup-debuginfo-2.3.3-4.el8_5.1.aarch64.rpm', 'veritysetup-debuginfo-2.3.3-4.el8_5.1.x86_64.rpm']}\. Rocky Linux 8 has released a significant security patch for OpenSSL, targeting possible risks and weaknesses.. Rocky Linux Security, Cryptsetup Update, Disk Encryption, Security Patch. . LinuxSecurity.com Team
Sep 02, 2022
Rocky Linux
172
security advisorysecurity issueubuntuUbuntu 20.04 LTS: USN-5286-1 Moderate: Cryptsetup Sensitive Exposure
cryptsetup could be made to expose sensitive information.. =========================================================================Ubuntu Security Notice USN-5286-1 February 15, 2022 cryptsetup vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS Summary: cryptsetup could be made to expose sensitive information. Software Description: - cryptsetup: disk encryption support Details: Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may trigger the device to be unencrypted the next time it is mounted by the user. On Ubuntu 20.04 LTS, this issue was fixed by disabling the online reencryption feature. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: cryptsetup 2:2.3.7-0ubuntu0.21.10.1 Ubuntu 20.04 LTS: cryptsetup 2:2.2.2-3ubuntu2.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5286-1 CVE-2021-4122 Package Information: https://launchpad.net/ubuntu/+source/cryptsetup/2:2.3.7-0ubuntu0.21.10.1 https://launchpad.net/ubuntu/+source/cryptsetup/2:2.2.2-3ubuntu2.4 . A flaw in Cryptsetup exposes confidential data on Ubuntu machines, signaling a major security threat.. Cryptsetup Vulnerability, Ubuntu Security Notice, Sensitive Information Exposure. . LinuxSecurity.com Team
Feb 15, 2022
Ubuntu
89
security advisoryFedorasecurity fixFedora 34: 2022-61b55b6ebc Moderate: Cryptsetup CVE-2021-4122 Security
Security fix for CVE-2021-4122.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-61b55b6ebc 2022-01-26 23:39:02.084895 --------------------------------------------------------------------------------Name : cryptsetup Product : Fedora 34 Version : 2.3.7 Release : 1.fc34 URL : https://gitlab.com/cryptsetup/cryptsetup Summary : Utility for setting up encrypted disks Description : The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-4122. --------------------------------------------------------------------------------ChangeLog: * Thu Jan 13 2022 Ondrej Kozina - 2.3.7-1 - Update to cryptsetup 2.3.7. --------------------------------------------------------------------------------References: [ 1 ] Bug #2032401 - CVE-2021-4122 cryptsetup: disable encryption via header rewrite https://bugzilla.redhat.com/show_bug.cgi?id=2032401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-61b55b6ebc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 26, 2022
•Important
Fedora
98
security advisorysecurity updateRed HatRed Hat Enterprise Linux 8.2: Security Update RHSA-2021:0258 for Cryptsetup
An update for cryptsetup is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: cryptsetup security update Advisory ID: RHSA-2021:0258-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0258 Issue date: 2021-01-26 CVE Names: CVE-2020-14382 ==================================================================== 1. Summary: An update for cryptsetup is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS EUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 3. Description: The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module. Security Fix(es): * cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1874712 - CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments 6.Package List: Red Hat Enterprise Linux AppStream EUS (v. 8.2): aarch64: cryptsetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-devel-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm ppc64le: cryptsetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-devel-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm s390x: cryptsetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-devel-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.s390x.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm x86_64: cryptsetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.i686.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-devel-2.2.2-1.el8_2.1.i686.rpm cryptsetup-devel-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm Red Hat Enterprise Linux BaseOS EUS (v.8.2): Source: cryptsetup-2.2.2-1.el8_2.1.src.rpm aarch64: cryptsetup-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-libs-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-reencrypt-2.2.2-1.el8_2.1.aarch64.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm integritysetup-2.2.2-1.el8_2.1.aarch64.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm veritysetup-2.2.2-1.el8_2.1.aarch64.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.aarch64.rpm ppc64le: cryptsetup-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-libs-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-reencrypt-2.2.2-1.el8_2.1.ppc64le.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm integritysetup-2.2.2-1.el8_2.1.ppc64le.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm veritysetup-2.2.2-1.el8_2.1.ppc64le.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.ppc64le.rpm s390x: cryptsetup-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-libs-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-reencrypt-2.2.2-1.el8_2.1.s390x.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.s390x.rpm integritysetup-2.2.2-1.el8_2.1.s390x.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm veritysetup-2.2.2-1.el8_2.1.s390x.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.s390x.rpm x86_64: cryptsetup-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.i686.rpm cryptsetup-debugsource-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-libs-2.2.2-1.el8_2.1.i686.rpm cryptsetup-libs-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-libs-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-reencrypt-2.2.2-1.el8_2.1.x86_64.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.i686.rpm cryptsetup-reencrypt-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm integritysetup-2.2.2-1.el8_2.1.x86_64.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm integritysetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm veritysetup-2.2.2-1.el8_2.1.x86_64.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.i686.rpm veritysetup-debuginfo-2.2.2-1.el8_2.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-14382 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYA/7ptzjgjWX9erEAQi9eQ/+KOhQyphQhgBr3IOyfdJGTZ6zslQZ4nlI o2nBkSuIucstRk/4WYNB8VESvmVhTJ0iDaIpw5FQtsbGWsxObRWj1Lr8QOZN4/RO 2dwepA0khBEoDNaHXIfxsMeTJxJiFQju8Urd7Il2nSpQ3caXenonTHUSwVKVG79p +8GJrQInUvaQgQ7N4855/+WkjPDZlO+bG4iU/9kEsyHbfqw2GIta3l0jChbmzDSn /LSzHISNjpAn8MObpVri1dLmAvGLs8ZC6S3moO2cYKRtPmrOakei2kJ5xorhU5FN NhxeNw27rE08oBPQzDfbXaUuses8EiJdOI5TarixQJ51Hv3omnF5AbmWULcXegxr Pfzkrp9lob4fenKLaXCk+mKOHv+fDGIAlXA9TiUDnzj0ovd/Uu6VH0DqjaAXkswT JTL9PWZ8YAdG7ZqHjLMDkGaZ5vvcqy7ZLudybjY0AwS1xKbR6Xl47ESOzYngrnCo +PfGIepTnbk0O8fvzIFeHESadMXArbznyp66l+Dp9f1l0pUcYJWzmY49HlrIV5Yv SgtXTF3aAz1ZCudogmVV0NwCJmdBBTsxUY65J8mL2z7AwdZYlysfasXSweYEpNai YfIeshY03zaTx+PvOE0GFit5UVz7YMQqSnPYeiIiTLSrP1MSDPZ8opYGgSl7NmUE YqugkP/81Nc=AxK2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 26, 2021
Red Hat
98
security advisorymoderatesecurity issueRedHat: RHSA-2020-4542 Moderate: Cryptsetup Out-Of-Bounds Write
An update for cryptsetup is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: cryptsetup security, bug fix, and enhancement update Advisory ID: RHSA-2020:4542-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:4542 Issue date: 2020-11-03 CVE Names: CVE-2020-14382 ==================================================================== 1. Summary: An update for cryptsetup is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module. The following packages have been upgraded to a later upstream version: cryptsetup (2.3.3). (BZ#1796826) Security Fix(es): * cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the Referencessection. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1743891 - Attempting to use cryptsetup-reencrypt on new "cryptsetup reencrypt" formated luks device fails due to "Online reencryption in progress. Aborting." 1785748 - Expose crypt_safe_free in libcryptsetup public API 1796826 - Rebase cryptsetup to 2.3.0 1874712 - CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments 6. Package List: Red Hat Enterprise Linux AppStream (v.8): aarch64: cryptsetup-debuginfo-2.3.3-2.el8.aarch64.rpm cryptsetup-debugsource-2.3.3-2.el8.aarch64.rpm cryptsetup-devel-2.3.3-2.el8.aarch64.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.aarch64.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.aarch64.rpm integritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm veritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm ppc64le: cryptsetup-debuginfo-2.3.3-2.el8.ppc64le.rpm cryptsetup-debugsource-2.3.3-2.el8.ppc64le.rpm cryptsetup-devel-2.3.3-2.el8.ppc64le.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.ppc64le.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.ppc64le.rpm integritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm veritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm s390x: cryptsetup-debuginfo-2.3.3-2.el8.s390x.rpm cryptsetup-debugsource-2.3.3-2.el8.s390x.rpm cryptsetup-devel-2.3.3-2.el8.s390x.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.s390x.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.s390x.rpm integritysetup-debuginfo-2.3.3-2.el8.s390x.rpm veritysetup-debuginfo-2.3.3-2.el8.s390x.rpm x86_64: cryptsetup-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-debuginfo-2.3.3-2.el8.x86_64.rpm cryptsetup-debugsource-2.3.3-2.el8.i686.rpm cryptsetup-debugsource-2.3.3-2.el8.x86_64.rpm cryptsetup-devel-2.3.3-2.el8.i686.rpm cryptsetup-devel-2.3.3-2.el8.x86_64.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.x86_64.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.x86_64.rpm integritysetup-debuginfo-2.3.3-2.el8.i686.rpm integritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm veritysetup-debuginfo-2.3.3-2.el8.i686.rpm veritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm Red Hat Enterprise Linux BaseOS (v.8): Source: cryptsetup-2.3.3-2.el8.src.rpm aarch64: cryptsetup-2.3.3-2.el8.aarch64.rpm cryptsetup-debuginfo-2.3.3-2.el8.aarch64.rpm cryptsetup-debugsource-2.3.3-2.el8.aarch64.rpm cryptsetup-libs-2.3.3-2.el8.aarch64.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.aarch64.rpm cryptsetup-reencrypt-2.3.3-2.el8.aarch64.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.aarch64.rpm integritysetup-2.3.3-2.el8.aarch64.rpm integritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm veritysetup-2.3.3-2.el8.aarch64.rpm veritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm ppc64le: cryptsetup-2.3.3-2.el8.ppc64le.rpm cryptsetup-debuginfo-2.3.3-2.el8.ppc64le.rpm cryptsetup-debugsource-2.3.3-2.el8.ppc64le.rpm cryptsetup-libs-2.3.3-2.el8.ppc64le.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.ppc64le.rpm cryptsetup-reencrypt-2.3.3-2.el8.ppc64le.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.ppc64le.rpm integritysetup-2.3.3-2.el8.ppc64le.rpm integritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm veritysetup-2.3.3-2.el8.ppc64le.rpm veritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm s390x: cryptsetup-2.3.3-2.el8.s390x.rpm cryptsetup-debuginfo-2.3.3-2.el8.s390x.rpm cryptsetup-debugsource-2.3.3-2.el8.s390x.rpm cryptsetup-libs-2.3.3-2.el8.s390x.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.s390x.rpm cryptsetup-reencrypt-2.3.3-2.el8.s390x.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.s390x.rpm integritysetup-2.3.3-2.el8.s390x.rpm integritysetup-debuginfo-2.3.3-2.el8.s390x.rpm veritysetup-2.3.3-2.el8.s390x.rpm veritysetup-debuginfo-2.3.3-2.el8.s390x.rpm x86_64: cryptsetup-2.3.3-2.el8.x86_64.rpm cryptsetup-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-debuginfo-2.3.3-2.el8.x86_64.rpm cryptsetup-debugsource-2.3.3-2.el8.i686.rpm cryptsetup-debugsource-2.3.3-2.el8.x86_64.rpm cryptsetup-libs-2.3.3-2.el8.i686.rpm cryptsetup-libs-2.3.3-2.el8.x86_64.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-libs-debuginfo-2.3.3-2.el8.x86_64.rpm cryptsetup-reencrypt-2.3.3-2.el8.x86_64.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.i686.rpm cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.x86_64.rpm integritysetup-2.3.3-2.el8.x86_64.rpm integritysetup-debuginfo-2.3.3-2.el8.i686.rpm integritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm veritysetup-2.3.3-2.el8.x86_64.rpm veritysetup-debuginfo-2.3.3-2.el8.i686.rpm veritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-14382 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX6I3UtzjgjWX9erEAQgFmA//Y1uQk4RbnHUQaGxIlggUScToTGrdd3VV MY49IUoz9mojBxnV9yA2l/DEVsxzdU5+FWj/HHUIyaBWcgmh5c274jyDSe4kZRjT x6wsParsrjlzU9Jpg/u7ttvHV33Enydr5v+1cHYCNpgQv16ovrwZuuTcyZrrprgR cAJ2HYYSYdEBQyUbvMniCaNu+7IyE09G5cvXJFySQlvCclzYe2WxKjE6LnLWBydD wSMiMC5fChopNjP8svoaWlTUUKpVBBfjPvrscYS2Z3Wju3JPg+mJidr6n2LmwGMZ dpXz82q7H6yw6eCPpySqNNSUrlZpJWIQ/VKRInBRJ0PA7QEN8zyz/cZ1D4v30t6l DsClFx5ePBWWM2EvsykoSKKqnmEBcQY8eX6BXO3m3lW1UEE3r/EotDEV7BZQ3vo9 oybCWp9qOEzqud85gAfy64MgK+dFAhAT82DK+YtzaWoJmWTG4qn0dAMJM7RGQ2TQ SFPU9dHxceDBeDdA7g7/ChxXAWYBvlPSPsuwIjmgW6BUyctw6YanpoNFQJXXCHVn UfzJt2qszGCeo4kvFSTa2E4aIRXqJHYwrmkARRDym6ptzdkZyykAq1r3FmLQM+i2 jCFHGWXxGaFAil5mKOweCBiI+ZUwedGLdmgUCCnK4fyW9CMV1I21qKmCBIv7dWkv 9wP3ueBaWlA=PPZS -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 04, 2020
Red Hat
89
security advisoryFedoradisk encryptionFedora 33: FEDORA-2020-8c76e12e62 Critical: Cryptsetup Out-Of-Bounds
Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-8c76e12e62 2020-09-25 16:31:57.892812 --------------------------------------------------------------------------------Name : cryptsetup Product : Fedora 33 Version : 2.3.4 Release : 1.fc33 URL : https://gitlab.com/cryptsetup/cryptsetup Summary : A utility for setting up encrypted disks Description : The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module. --------------------------------------------------------------------------------Update Information: Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382 --------------------------------------------------------------------------------ChangeLog: * Thu Sep 3 2020 Milan Broz - 2.3.4-1 - Update to cryptsetup 2.3.4. - Fix for CVE-2020-14382 (#1874712) --------------------------------------------------------------------------------References: [ 1 ] Bug #1874712 - CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments https://bugzilla.redhat.com/show_bug.cgi?id=1874712 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-8c76e12e62' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 25, 2020
•Critical
Fedora
89
security advisoryfedorasecurity fixFedora 31: FEDORA-2020-5ed5af6275 Critical: Cryptsetup Out-Of-Bounds Write
Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-5ed5af6275 2020-09-19 22:44:26.739578 --------------------------------------------------------------------------------Name : cryptsetup Product : Fedora 31 Version : 2.3.4 Release : 1.fc31 URL : https://gitlab.com/cryptsetup/cryptsetup Summary : A utility for setting up encrypted disks Description : The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module. --------------------------------------------------------------------------------Update Information: Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382 --------------------------------------------------------------------------------ChangeLog: * Thu Sep 3 2020 Milan Broz - 2.3.4-1 - Update to cryptsetup 2.3.4. - Fix for CVE-2020-14382 (#1874712) --------------------------------------------------------------------------------References: [ 1 ] Bug #1874712 - CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments https://bugzilla.redhat.com/show_bug.cgi?id=1874712 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-5ed5af6275' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 19, 2020
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!