< back to search

gpp_maybe Security update for cryptctl
SUSE-SLE-Module-Basesystem-15-SP2-2021-2136

This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move repository into the SUSE github organization - in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address - tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case - avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.

  • Release Date
    Jun 23 2021
  • References
    Bugzilla: 1186226
    CVEs: CVE-2019-18906
  • Type
    security
  • Severity
    important

cloud_download Downloads

Basesystem Module 15.2 ppc64le
  • Packages
    cryptctl
    A utility for setting up LUKS-based disk encryption
    2.4-4.5.1 lock rpm lock src
Basesystem Module 15.2 x86_64
  • Packages
    cryptctl
    A utility for setting up LUKS-based disk encryption
    2.4-4.5.1 lock rpm lock src