Medium ELSA-2022-0370 1 CVE

Moderate: cryptsetup security update (Oracle Linux 8)

Published Feb 2, 2022 · Updated Feb 2, 2022

Ecosystem: Oracle Linux

Summary

[2.3.3-4.1]
- patch: fix CVE-2021-4122.
- Resolves: #2036906

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 8	cryptsetup	0:2.3.3-4.el8_5.1
Oracle Linux · 8	cryptsetup-devel	0:2.3.3-4.el8_5.1
Oracle Linux · 8	cryptsetup-libs	0:2.3.3-4.el8_5.1
Oracle Linux · 8	cryptsetup-reencrypt	0:2.3.3-4.el8_5.1
Oracle Linux · 8	integritysetup	0:2.3.3-4.el8_5.1
Oracle Linux · 8	veritysetup	0:2.3.3-4.el8_5.1

Vulnerabilities 1

Unscored —

CVE-2021-4122

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery …

cryptsetup cryptsetup cryptsetup Debian Ubuntu Alpine

Aug 24, 2022