< back to search

shield Security update for cryptsetup
SUSE-SLES-16.0-1229

This update for cryptsetup fixes the following issues: Changes in cryptsetup: - Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252). * Add keyring key type. [b6fb6fc0] * Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0] * Use unique intermediary keyring name per device. [04ef07a7] * Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]

  • Release Date
    Jul 13 2026
  • References
    Bugzilla: 1270254, 1270252
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    cryptsetup
    Setup program for dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm
    cryptsetup-doc
    Cryptsetup Documentation
    2.8.4-160000.2.1 lock rpm
    cryptsetup-lang
    Translations for package cryptsetup
    2.8.4-160000.2.1 lock rpm
    cryptsetup-ssh
    Cryptsetup LUKS2 SSH token
    2.8.4-160000.2.1 lock rpm
    libcryptsetup-devel
    Header files for libcryptsetup
    2.8.4-160000.2.1 lock rpm
    libcryptsetup12
    Library for setting up dm-crypt Based Encrypted Block Devices
    2.8.4-160000.2.1 lock rpm