← Back

Calamares

calamares

Vendor: Calamares • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-13179
1Calamares
1Calamares
Jun 17, 2026
Jul 2, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this o...Show more
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.Show less
CVE-2019-13178
1Calamares
1Calamares
Jun 17, 2026
Jul 2, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.