I’ve returned from a summer break, bicycling in France, and it’s time to pick up Calamares development again. Starting July 29th, Calamares will be back in business, with the current short-cycle release model being resumed.

The Calamares team is .. not particularly happy to have to announce the availability of Calamares 3.2.11, a security update in the features-and-functionality series of Calamares 3.2.x. This is purely a security release for CVE-2019-13179 and CVE-2019-13178. A full description is avalable at Calamares Initramfs Weakness.

Calamares is a distribution-independent system installer, with an advanced partitioning feature for both manual and automated partitioning operations. Calamares is designed to be customizable by distribution maintainers without need for cumbersome patching, thanks to third party branding and external modules support.

Systems installed by Calamares up to and including Calamares 3.2.10 may leak cryptographic keys via lax file permissions on initramfs files. This may allow unprivileged users to obtain the decryption keys for encrypted disks.

In addition, during installation by Calamares up to and including Calamares 3.2.10 there is a window of opportunity for reading cryptographic keys via lax file permissions. This may allow unprivileged users to obtain the decryption keys for encrypted disks.

The Calamares team is happy to announce the availability of Calamares 3.2.10, yet another update in the features-and-functionality series of Calamares 3.2.x. This is a short-cycle feature-and-bugfix release.

Calamares is a distribution-independent system installer, with an advanced partitioning feature for both manual and automated partitioning operations. Calamares is designed to be customizable by distribution maintainers without need for cumbersome patching, thanks to third party branding and external modules support.