To Devs: please update cryptsetup package soon

User Package Requests for MX-19
Forum rules
Post Reply
Message
Author
grelos
Posts: 76
Joined: Wed Mar 28, 2018 3:12 pm

To Devs: please update cryptsetup package soon

#1 Post by grelos »

Following this report, please update in the repository to cryptsetup 2.4.3 Thanks

https://nakedsecurity.sophos.com/2022/0 ... patch-now/
MX-19 on Lenovo 520-15IKB
Top
User avatar
Eadwine Rose
Administrator
Posts: 14470
Joined: Wed Jul 12, 2006 2:10 am

Re: To Devs: please update cryptsetup package soon

#2 Post by Eadwine Rose »

Moved to package requests.
MX-23.6_x64 July 31 2023 * 6.1.0-34amd64 ext4 Xfce 4.20.0 * 8-core AMD Ryzen 7 2700
Asus TUF B450-Plus Gaming UEFI * Asus GTX 1050 Ti Nvidia 535.216.01 * 2x16Gb DDR4 2666 Kingston HyperX Predator
Samsung 870EVO * Samsung S24D330 & P2250 * HP Envy 5030
Top
SwampRabbit
Posts: 3602
Joined: Tue Jun 14, 2016 2:02 pm

Re: To Devs: please update cryptsetup package soon

#3 Post by SwampRabbit »

Please see https://security-tracker.debian.org/tra ... -2021-4122

The version in MX-19 (Debian Buster is not affected).

Also please bear in mind that exploiting this requires repeated physical access to the vulnerable LUKS device.
NEW USERS START HERE FAQS, MX Manual, and How to Break Your System - Don't use Ubuntu PPAs! Always post your Quick System Info (QSI) when asking for help.
Top
User avatar
Stevo
Developer
Posts: 14452
Joined: Fri Dec 15, 2006 7:07 pm

Re: To Devs: please update cryptsetup package soon

#4 Post by Stevo »

My guess is that with it requiring repeated physical access, it's really not high priority, so a patch will be coming with the next Debian point release.
Top
User avatar
Lvl2u
Posts: 5
Joined: Sat Feb 12, 2022 2:08 pm

Re: To Devs: please update cryptsetup package soon

#5 Post by Lvl2u »

so, what if I download the newest version of cryptseptup and install the TAR manually?

Yeah, Im a begginer
"In the struggle between yourself and the world, second the world" -Kakfa
Top
User avatar
dolphin_oracle
Developer
Posts: 22074
Joined: Sun Dec 16, 2007 12:17 pm

Re: To Devs: please update cryptsetup package soon

#6 Post by dolphin_oracle »

https://security-tracker.debian.org/tra ... -2021-4122

its already fixed.
http://www.youtube.com/runwiththedolphin
lenovo ThinkPad X1 Extreme Gen 4 - MX-23
FYI: mx "test" repo is not the same thing as debian testing repo.
Top
SwampRabbit
Posts: 3602
Joined: Tue Jun 14, 2016 2:02 pm

Re: To Devs: please update cryptsetup package soon

#7 Post by SwampRabbit »

Lvl2u wrote: Sat Feb 12, 2022 2:27 pm ...
Yeah, Im a begginer
You're also a Porygon it seems...

Sorry I couldn't help it :p
NEW USERS START HERE FAQS, MX Manual, and How to Break Your System - Don't use Ubuntu PPAs! Always post your Quick System Info (QSI) when asking for help.
Top
User avatar
Lvl2u
Posts: 5
Joined: Sat Feb 12, 2022 2:08 pm

Re: To Devs: please update cryptsetup package soon

#8 Post by Lvl2u »

SwampRabbit wrote: Sat Feb 12, 2022 2:56 pm
Lvl2u wrote: Sat Feb 12, 2022 2:27 pm ...
Yeah, Im a begginer
You're also a Porygon it seems...

Sorry I couldn't help it :p
It's ok, I will UPGRADE anyways ;)
"In the struggle between yourself and the world, second the world" -Kakfa
Top
Post Reply

Return to “Package Requests/Status - MX-19”