Systems installed by Calamares up to and including Calamares 3.2.10 may leak cryptographic keys via lax file permissions on initramfs files. This may allow unprivileged users to obtain the decryption keys for encrypted disks.

In addition, during installation by Calamares up to and including Calamares 3.2.10 there is a window of opportunity for reading cryptographic keys via lax file permissions. This may allow unprivileged users to obtain the decryption keys for encrypted disks.

The Calamares team is happy to announce the availability of Calamares 3.2.10, yet another update in the features-and-functionality series of Calamares 3.2.x. This is a short-cycle feature-and-bugfix release.

Calamares is a distribution-independent system installer, with an advanced partitioning feature for both manual and automated partitioning operations. Calamares is designed to be customizable by distribution maintainers without need for cumbersome patching, thanks to third party branding and external modules support.

The Calamares website has migrated entirely to GitHub pages. Previously it used some tiny hosting to forward requests, but this is no longer necessary. This does mean that the certificate for the site has changed, and on the 24th June at least there were certificate warnings when accessing the site.

The Calamares team is happy to announce the availability of Calamares 3.2.9, yet another update in the features-and-functionality series of Calamares 3.2.x. This is a short-cycle feature-and-bugfix release.

Calamares is a distribution-independent system installer, with an advanced partitioning feature for both manual and automated partitioning operations. Calamares is designed to be customizable by distribution maintainers without need for cumbersome patching, thanks to third party branding and external modules support.