Calamares Devs Warn of Weaker Password Salt, Urge Users to Reset Their Password

The developers of the Calamares open-source universal installer framework issued a warning to inform those who used Calamares 3.1 or a previous version to install their current GNU/Linux operating system of a possible password weakness issue.

According to the Calamares developers, this password weakness issue was discovered to affect all Calamares versions prior to the 3.1.1 release, which was released last week with improved salting for user passwords, and they believe it's important if an attacker has a method of obtaining the password hash, which could compromise your Linux-based operating system.

"Systems installed by Calamares up to and including Calamares 3.1 have a weaker password salt than they should. This weakness is important if an attacker has a way to obtain the password hash. The Calamares team beli...