CVE-2019-13179

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from
/crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally
readable initramfs image with insecure permissions, which allows this
originally protected file to be read by any user, thereby disclosing
decryption keys for LUKS containers created with Full Disk Encryption.

Bugs

• <https://github.com/calamares/calamares/issues/1191&gt;
• <https://bugs.launchpad.net/ubuntu/+source/calamares/+bug/1835095&gt;