oss-sec mailing list archives

Re: CVE-2016-4484: - Cryptsetup Initrd root Shell

From: Leo Famulari <leo () famulari name>
Date: Mon, 14 Nov 2016 22:27:07 -0500

On Mon, Nov 14, 2016 at 08:45:51PM +0000, Hector Marco wrote:

Hello All,

Affected package
----------------
Cryptsetup <= 2:1


Hi,

Can you clarify which versions are affected?

The latest upstream version is 1.7.3:

https://gitlab.com/cryptsetup/cryptsetup/commits/master

What is the 2:1 version?

Attachment: signature.asc
Description:

Current thread:

CVE-2016-4484: - Cryptsetup Initrd root Shell Hector Marco (Nov 14)
- Re: CVE-2016-4484: - Cryptsetup Initrd root Shell - Update: Dracut is also vulnerable Hector Marco-Gisbert (Nov 14)
- Re: CVE-2016-4484: - Cryptsetup Initrd root Shell Leo Famulari (Nov 14)
  - Re: [FD] [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell Hector Marco (Nov 15)
    - Re: Re: [FD] [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell Jeremy Stanley (Nov 15)
- Re: CVE-2016-4484: - Cryptsetup Initrd root Shell Jason Cooper (Nov 16)
  - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell John Haxby (Nov 16)
    - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell Jason Cooper (Nov 17)
    - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell John Haxby (Nov 17)
    - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell Jason Cooper (Nov 17)
    - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell John Haxby (Nov 17)
    - Re: CVE-2016-4484: - Cryptsetup Initrd root Shell Jacobo Avariento (Nov 17)
    - Linux encrypted boot security, was: CVE-2016-4484: - Cryptsetup Initrd root Shell Jason Cooper (Nov 18)