MGASA-2022-0047

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2022-0047.html
Import Source
https://advisories.mageia.org/MGASA-2022-0047.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2022-0047
Related
Published
2022-02-03T20:29:44Z
Modified
2022-02-03T19:52:10Z
Summary
Updated cryptsetup packages fix security vulnerability
Details

An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device (CVE-2021-4122).

References
Credits

Affected packages

Mageia:8 / cryptsetup

Package

Name
cryptsetup
Purl
pkg:rpm/mageia/cryptsetup?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.3.7-1.mga8

Ecosystem specific 

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2022-0047.json"