Date: Mon, 14 Nov 2016 22:27:07 -0500 From: Leo Famulari <leo@...ulari.name> To: oss-security@...ts.openwall.com Cc: fulldisclosure@...lists.org, bugtraq@...urityfocus.com Subject: Re: CVE-2016-4484: - Cryptsetup Initrd root Shell On Mon, Nov 14, 2016 at 08:45:51PM +0000, Hector Marco wrote: > Hello All, > > Affected package > ---------------- > Cryptsetup <= 2:1 Hi, Can you clarify which versions are affected? The latest upstream version is 1.7.3: https://gitlab.com/cryptsetup/cryptsetup/commits/master What is the 2:1 version? [ CONTENT OF TYPE application/pgp-signature SKIPPED ]
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ