Issued:
2020-11-03
Updated:
2020-11-03

RHSA-2020:4542 - Security Advisory

Synopsis

Moderate: cryptsetup security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for cryptsetup is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

The following packages have been upgraded to a later upstream version: cryptsetup (2.3.3). (BZ#1796826)

Security Fix(es):

  • cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 1743891 - Attempting to use cryptsetup-reencrypt on new "cryptsetup reencrypt" formated luks device fails due to "Online reencryption in progress. Aborting."
  • BZ - 1785748 - Expose crypt_safe_free in libcryptsetup public API
  • BZ - 1796826 - Rebase cryptsetup to 2.3.0
  • BZ - 1874712 - CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments

Red Hat Enterprise Linux for x86_64 8

SRPM
cryptsetup-2.3.3-2.el8.src.rpm SHA-256: fc9f54cf6c830d70ee2ce13ff2d9080838cabde4ef3c01574568c17f476223c0
x86_64
cryptsetup-2.3.3-2.el8.x86_64.rpm SHA-256: 1e751a1732515b96f2fd94f9aaeb5b4993c0279daf126f257f3a7369973c7862
cryptsetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 7ddce50da53e90b22b41441c12f2e9cb8f337c7a93e5376e7314b8cb98acf4fe
cryptsetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 7ddce50da53e90b22b41441c12f2e9cb8f337c7a93e5376e7314b8cb98acf4fe
cryptsetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: cffa7632c5cd3992595d7d5e6fde733396fe9643be3ca7189a33e08371541827
cryptsetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: cffa7632c5cd3992595d7d5e6fde733396fe9643be3ca7189a33e08371541827
cryptsetup-debugsource-2.3.3-2.el8.i686.rpm SHA-256: e36ca0d86e34c28ba2252ad9d9bb4fd5b457165cb59cb564a383074f02335d84
cryptsetup-debugsource-2.3.3-2.el8.i686.rpm SHA-256: e36ca0d86e34c28ba2252ad9d9bb4fd5b457165cb59cb564a383074f02335d84
cryptsetup-debugsource-2.3.3-2.el8.x86_64.rpm SHA-256: b7fee60dd21ac85b6226bd402defcdf244f8eb6e3b13afa4cfad411f93749bcf
cryptsetup-debugsource-2.3.3-2.el8.x86_64.rpm SHA-256: b7fee60dd21ac85b6226bd402defcdf244f8eb6e3b13afa4cfad411f93749bcf
cryptsetup-devel-2.3.3-2.el8.i686.rpm SHA-256: 9c8806998b3b20bc25afa843d833864331bf8604884e0c31fc7f0e796e2b6a07
cryptsetup-devel-2.3.3-2.el8.x86_64.rpm SHA-256: 1a8737502050d3ec80ddba204f32886113af114a19f94c77826fedd50b40ad80
cryptsetup-libs-2.3.3-2.el8.i686.rpm SHA-256: 5fdd28f651d07f776767190fb5be035598c7c3dfb83d23238f1fa6ce3ab9c06c
cryptsetup-libs-2.3.3-2.el8.x86_64.rpm SHA-256: 253fd2de78f08153bb561827b7ffcfbadb7ddc95e44eb8aa7ef23cd37843b314
cryptsetup-libs-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 08db2fa1633f936986eedd852b2a70e413fa4424f99f14c820e8c749f9f8549b
cryptsetup-libs-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 08db2fa1633f936986eedd852b2a70e413fa4424f99f14c820e8c749f9f8549b
cryptsetup-libs-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: 78a47a3051b46bf51fb0017511237390147633f94edb76c722ff355a95c16069
cryptsetup-libs-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: 78a47a3051b46bf51fb0017511237390147633f94edb76c722ff355a95c16069
cryptsetup-reencrypt-2.3.3-2.el8.x86_64.rpm SHA-256: 21e72e512fe68239ad8d61fca01a43516f0545e21e56fa241cab416e830fa92d
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: d38cca3ea3875f7b07b1889ba85d454c0b11b75ab1e7ad56b400a915724c43d7
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: d38cca3ea3875f7b07b1889ba85d454c0b11b75ab1e7ad56b400a915724c43d7
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: 5e7a7cba98cf2880d6db84333769622ed359e2f5dcb2fc850a5717328d23fb11
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: 5e7a7cba98cf2880d6db84333769622ed359e2f5dcb2fc850a5717328d23fb11
integritysetup-2.3.3-2.el8.x86_64.rpm SHA-256: 33d083eb4c8ae591e0c75cff29227ea0ba6024058b55d8b0a63a6c2e1deed34c
integritysetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 74c6bcc934e11a61ca7bb356616320bc47fe9ef8fa90f4c2aa14ac38ece802bf
integritysetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 74c6bcc934e11a61ca7bb356616320bc47fe9ef8fa90f4c2aa14ac38ece802bf
integritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: f0a675097eddd4bcebb4fab33a3c71b96d4964665ea8679af26d85ef23eede07
integritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: f0a675097eddd4bcebb4fab33a3c71b96d4964665ea8679af26d85ef23eede07
veritysetup-2.3.3-2.el8.x86_64.rpm SHA-256: 96fccd10cdc6dc205c88dc493153c938002d3c622d864d42f06c24afac082fa4
veritysetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 34438837db817919e57f63a271d074d475c850303e3f9aa82027618d118c8517
veritysetup-debuginfo-2.3.3-2.el8.i686.rpm SHA-256: 34438837db817919e57f63a271d074d475c850303e3f9aa82027618d118c8517
veritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: d220d503103bf89eb8e7851fceae07f4d189b1415b3b2185a1b6b476f65166bc
veritysetup-debuginfo-2.3.3-2.el8.x86_64.rpm SHA-256: d220d503103bf89eb8e7851fceae07f4d189b1415b3b2185a1b6b476f65166bc

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
cryptsetup-2.3.3-2.el8.src.rpm SHA-256: fc9f54cf6c830d70ee2ce13ff2d9080838cabde4ef3c01574568c17f476223c0
s390x
cryptsetup-2.3.3-2.el8.s390x.rpm SHA-256: a204fe7a238d70e4c86b65c99eb20daafe6f492f83cc2f81eac089e9a6f181cf
cryptsetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 199b46cda94deff5acc598fc31baa003f516a5465b30b01fd09f7b6d719590b4
cryptsetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 199b46cda94deff5acc598fc31baa003f516a5465b30b01fd09f7b6d719590b4
cryptsetup-debugsource-2.3.3-2.el8.s390x.rpm SHA-256: c3f6a9a6d27166a9153b9e046d9271abb644e96db4a16f3581b761dc01d54f2b
cryptsetup-debugsource-2.3.3-2.el8.s390x.rpm SHA-256: c3f6a9a6d27166a9153b9e046d9271abb644e96db4a16f3581b761dc01d54f2b
cryptsetup-devel-2.3.3-2.el8.s390x.rpm SHA-256: ad964058d45006b337f1c2b65183261f389d457666ddcf9ad30af2c1f06db3ea
cryptsetup-libs-2.3.3-2.el8.s390x.rpm SHA-256: 8611fe374e64b2af037e3adeea7a9db56df3ef096ee5ea7fb23d3e04badad22f
cryptsetup-libs-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 8130a70ace59bf2625c394983aff15774daa73afb8b695d653c7de295d19a523
cryptsetup-libs-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 8130a70ace59bf2625c394983aff15774daa73afb8b695d653c7de295d19a523
cryptsetup-reencrypt-2.3.3-2.el8.s390x.rpm SHA-256: bfd3a4431eb1a948030c416e9c2deb473aed1fad96e302eaeabd3ea1934aa648
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: ccebec07aa1d5adddd8a14bd4d9b570ac21a863da550b473caaf2c49449e8ca6
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: ccebec07aa1d5adddd8a14bd4d9b570ac21a863da550b473caaf2c49449e8ca6
integritysetup-2.3.3-2.el8.s390x.rpm SHA-256: 8b3a12cf2da2242f0e0e7e3f7373982d8bfbcfb7ef2630b76ca9a83aaac2d6e9
integritysetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 4f317c5cb183c6a464be65ca235e60b39e8fec19433f4ba1d47686f30f1e7ee8
integritysetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: 4f317c5cb183c6a464be65ca235e60b39e8fec19433f4ba1d47686f30f1e7ee8
veritysetup-2.3.3-2.el8.s390x.rpm SHA-256: 1d41bafd148c1fd6d827ca5c6f31ee65725a50b9716017a9d3950ba82e527a7c
veritysetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: a268d62892cf666046abfcd6a49342db51e0ef86dbbf5c4e8533484d14f35264
veritysetup-debuginfo-2.3.3-2.el8.s390x.rpm SHA-256: a268d62892cf666046abfcd6a49342db51e0ef86dbbf5c4e8533484d14f35264

Red Hat Enterprise Linux for Power, little endian 8

SRPM
cryptsetup-2.3.3-2.el8.src.rpm SHA-256: fc9f54cf6c830d70ee2ce13ff2d9080838cabde4ef3c01574568c17f476223c0
ppc64le
cryptsetup-2.3.3-2.el8.ppc64le.rpm SHA-256: 3df9a5efeaa21ea976331a53b1df586d99daac7ba13c8fc69cce721de5e6fa7f
cryptsetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 004ee9aa355552c624fc780dad4728f67a8d95c2bdd939b40f6f19e6621dfd76
cryptsetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 004ee9aa355552c624fc780dad4728f67a8d95c2bdd939b40f6f19e6621dfd76
cryptsetup-debugsource-2.3.3-2.el8.ppc64le.rpm SHA-256: 202d0536cd39eb08818b34b501bb658f39f47263d121adfe6be3f55c0cbb3228
cryptsetup-debugsource-2.3.3-2.el8.ppc64le.rpm SHA-256: 202d0536cd39eb08818b34b501bb658f39f47263d121adfe6be3f55c0cbb3228
cryptsetup-devel-2.3.3-2.el8.ppc64le.rpm SHA-256: 6347288b545a8f31cb819fd6577009a2ae568d902c3af17e14c7566e382da7ea
cryptsetup-libs-2.3.3-2.el8.ppc64le.rpm SHA-256: eab7ab903a4118583cf19de3fdcb9876030c3c6ab272c02d62fa788891ea97a6
cryptsetup-libs-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: f028c66665932b2c8ae8e35db4c4ceb1d15095ffeb8d6529ef72f76a392729ba
cryptsetup-libs-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: f028c66665932b2c8ae8e35db4c4ceb1d15095ffeb8d6529ef72f76a392729ba
cryptsetup-reencrypt-2.3.3-2.el8.ppc64le.rpm SHA-256: 606419e8d3ca76b8cdd4fb30602f469044e6394c030c4107600e73b4b73275df
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: bb3ffcc2359f88f3e0520451ecbd2531e284cef8e7741f2f31700fcef0405e84
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: bb3ffcc2359f88f3e0520451ecbd2531e284cef8e7741f2f31700fcef0405e84
integritysetup-2.3.3-2.el8.ppc64le.rpm SHA-256: 7d6dc2829095af03d7a118c0733500e6f7b551af0fd1e80a582905efabe34d08
integritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 4dc55a599666fc0b0f17b5cfca0d9692a51849475fe986cc3e7cbedb2a6fdba5
integritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 4dc55a599666fc0b0f17b5cfca0d9692a51849475fe986cc3e7cbedb2a6fdba5
veritysetup-2.3.3-2.el8.ppc64le.rpm SHA-256: 4547949ff44050fcc39e97ebf0043d7e545c0149f3cd21067c44d4bdbb7c1e69
veritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 821085622cf79fe0ee546b89887b6082add3c086fd597d02607dffb91cc6e0c2
veritysetup-debuginfo-2.3.3-2.el8.ppc64le.rpm SHA-256: 821085622cf79fe0ee546b89887b6082add3c086fd597d02607dffb91cc6e0c2

Red Hat Enterprise Linux for ARM 64 8

SRPM
cryptsetup-2.3.3-2.el8.src.rpm SHA-256: fc9f54cf6c830d70ee2ce13ff2d9080838cabde4ef3c01574568c17f476223c0
aarch64
cryptsetup-2.3.3-2.el8.aarch64.rpm SHA-256: 918118ea8fc62fa93c11b0dc12ad8b778ec7bcdc17c0a0887c996e69e7f8d296
cryptsetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 6bba2722a02b82a98941f860e43ea8cc99ae5265f3414595970157fce0b59497
cryptsetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 6bba2722a02b82a98941f860e43ea8cc99ae5265f3414595970157fce0b59497
cryptsetup-debugsource-2.3.3-2.el8.aarch64.rpm SHA-256: 88dafc11ecece4d7a8f387c829f14f552ad264f45885ebcefb7281ab1060d8c9
cryptsetup-debugsource-2.3.3-2.el8.aarch64.rpm SHA-256: 88dafc11ecece4d7a8f387c829f14f552ad264f45885ebcefb7281ab1060d8c9
cryptsetup-devel-2.3.3-2.el8.aarch64.rpm SHA-256: 2d35e0a170c66ccfdf77824ad6f9f78eb6ae4f4d7f41793173dfae00120b7671
cryptsetup-libs-2.3.3-2.el8.aarch64.rpm SHA-256: 59fd4b56ed2089601c536ac6fbff68ba90a746845a8c19e653204ead19f7590c
cryptsetup-libs-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: c788cdac8275b34b7dda5d314eea9971970734ff6d63ca42bd1d99959eceff3b
cryptsetup-libs-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: c788cdac8275b34b7dda5d314eea9971970734ff6d63ca42bd1d99959eceff3b
cryptsetup-reencrypt-2.3.3-2.el8.aarch64.rpm SHA-256: 6adc83a7de27d8659401c432d42b25f55c1549bc34805937ab6b80d0bc18995f
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 706be38361d53a15d2daf9dd4fd807ccaec0a569586afd44c058cf7255dc91cf
cryptsetup-reencrypt-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 706be38361d53a15d2daf9dd4fd807ccaec0a569586afd44c058cf7255dc91cf
integritysetup-2.3.3-2.el8.aarch64.rpm SHA-256: 3ae1700f72bfafc77f1de8305511a8e8571fed859dc7bfb54955f047ac03f469
integritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 7b38a4ee3a8ca155c14631c9d82b63dd273653de57725e3a55c22aacdd391dd9
integritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 7b38a4ee3a8ca155c14631c9d82b63dd273653de57725e3a55c22aacdd391dd9
veritysetup-2.3.3-2.el8.aarch64.rpm SHA-256: 9e7cc0eb2f5294273dde819dc7111e3da693f64589138d2cd912f65feca02f42
veritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 1daa06360d73e6ad543519c1e4a393f1d1dcf83eabfb9b10490e95f121951070
veritysetup-debuginfo-2.3.3-2.el8.aarch64.rpm SHA-256: 1daa06360d73e6ad543519c1e4a393f1d1dcf83eabfb9b10490e95f121951070

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.