Approved changes feed: RSS · Atom

cpe:2.3:a:calamares:calamares:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCalamares (583a5196-2110-588c-8b5d-d259096b5035)
ProductCalamares (e639538d-46ed-59d7-87a2-de985992746d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/calamares purl2cpe 2026-06-01 10:13:09.809515
pkg:deb/ubuntu/calamares purl2cpe 2026-06-01 10:13:09.809518
pkg:github/calamares/calamares purl2cpe 2026-06-01 10:13:09.809521
pkg:rpm/fedora/calamares purl2cpe 2026-06-01 10:13:09.809524
pkg:rpm/opensuse/calamares purl2cpe 2026-06-01 10:13:09.809527

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13179 vulnerable 2026-06-08 05:12:41.379582 Details available
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.
Published: 2019-07-02T22:43:46.000Z
Updated: 2024-08-04T23:41:10.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13178 vulnerable 2026-06-08 05:12:41.379060 Details available
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.
Published: 2019-07-02T22:43:24.000Z
Updated: 2024-08-04T23:41:10.699Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.