< back to search

shield Security update for cryptsetup
SUSE-SL-Micro-6.2-1229

This update for cryptsetup fixes the following issues: Changes in cryptsetup: - Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252). * Add keyring key type. [b6fb6fc0] * Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0] * Use unique intermediary keyring name per device. [04ef07a7] * Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]

  • Release Date
    Jul 13 2026
  • References
    Bugzilla: 1270254, 1270252
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Micro 6.2 ppc64le
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Micro 6.2 aarch64
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Micro 6.2 s390x
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Micro 6.2 x86_64
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm