Red Hat Security AdvisoryRHSA-2022:0370
cryptsetup security update
Released 2022-02-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cryptsetup-devel-2.3.3-4.el8_5.1
- Red Hat Enterprise Linux BaseOS (v. 8) cryptsetup-2.3.3-4.el8_5.1, cryptsetup-libs-2.3.3-4.el8_5.1, cryptsetup-reencrypt-2.3.3-4.el8_5.1 +2
Fixes 1 record
Priority LOW 20
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.
CVSS 3.1MEDIUM 4.3· Physical · No auth · User interaction · EPSS 0.00319 · Published 2022-08-24 · Fixed CWE-345
