cryptsetup security, bug fix, and enhancement update

2020-11-1000:00:00

linux.oracle.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

[2.3.3-2]

patch: Fix possible memory corruption in LUKS2 validation
code in 32bit library.
Resolves: #1872294
[2.3.3-1]
Update to cryptsetup 2.3.3
Resolves: #1796826 #1743891 #1785748
[2.3.1-1]
Update to cryptsetup 2.3.1
Resolves: #1796826 #1743891 #1785748

OSVersionArchitecturePackageVersionFilename
oracle linux8srccryptsetup< 2.3.3-2.el8cryptsetup-2.3.3-2.el8.src.rpm
oracle linux8aarch64cryptsetup< 2.3.3-2.el8cryptsetup-2.3.3-2.el8.aarch64.rpm
oracle linux8aarch64cryptsetup-devel< 2.3.3-2.el8cryptsetup-devel-2.3.3-2.el8.aarch64.rpm
oracle linux8aarch64cryptsetup-libs< 2.3.3-2.el8cryptsetup-libs-2.3.3-2.el8.aarch64.rpm
oracle linux8aarch64cryptsetup-reencrypt< 2.3.3-2.el8cryptsetup-reencrypt-2.3.3-2.el8.aarch64.rpm
oracle linux8aarch64integritysetup< 2.3.3-2.el8integritysetup-2.3.3-2.el8.aarch64.rpm
oracle linux8aarch64veritysetup< 2.3.3-2.el8veritysetup-2.3.3-2.el8.aarch64.rpm
oracle linux8srccryptsetup< 2.3.3-2.el8cryptsetup-2.3.3-2.el8.src.rpm
oracle linux8x86_64cryptsetup< 2.3.3-2.el8cryptsetup-2.3.3-2.el8.x86_64.rpm
oracle linux8i686cryptsetup-devel< 2.3.3-2.el8cryptsetup-devel-2.3.3-2.el8.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	cryptsetup	< 2.3.3-2.el8	cryptsetup-2.3.3-2.el8.src.rpm
oracle linux	8	aarch64	cryptsetup	< 2.3.3-2.el8	cryptsetup-2.3.3-2.el8.aarch64.rpm
oracle linux	8	aarch64	cryptsetup-devel	< 2.3.3-2.el8	cryptsetup-devel-2.3.3-2.el8.aarch64.rpm
oracle linux	8	aarch64	cryptsetup-libs	< 2.3.3-2.el8	cryptsetup-libs-2.3.3-2.el8.aarch64.rpm
oracle linux	8	aarch64	cryptsetup-reencrypt	< 2.3.3-2.el8	cryptsetup-reencrypt-2.3.3-2.el8.aarch64.rpm
oracle linux	8	aarch64	integritysetup	< 2.3.3-2.el8	integritysetup-2.3.3-2.el8.aarch64.rpm
oracle linux	8	aarch64	veritysetup	< 2.3.3-2.el8	veritysetup-2.3.3-2.el8.aarch64.rpm
oracle linux	8	src	cryptsetup	< 2.3.3-2.el8	cryptsetup-2.3.3-2.el8.src.rpm
oracle linux	8	x86_64	cryptsetup	< 2.3.3-2.el8	cryptsetup-2.3.3-2.el8.x86_64.rpm
oracle linux	8	i686	cryptsetup-devel	< 2.3.3-2.el8	cryptsetup-devel-2.3.3-2.el8.i686.rpm