cryptsetup (2:2.4.3-1) [PTS] [DDPO]

COMMITS: VCS has seen 14 commits since the debian/2%2.4.3-1 tag

Git: https://salsa.debian.org/cryptsetup-team/cryptsetup.git -b debian/latest
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/latest
Path: debian/changelog
Browser: https://salsa.debian.org/cryptsetup-team/cryptsetup
Last scan: 2022-05-26 22:53:10+00
Next scan: 2022-06-03 21:27:00+00
Merge requests: 5
CI pipeline status: success

Debian changelog in Git:

cryptsetup (2:2.4.3-1) unstable; urgency=high

  [ Guilhem Moulin ]
  * New upstream security release 2.4.3, with fix for CVE-2021-4122:
    decryption through LUKS2 reencryption crash recovery. (Closes: #1003685,
    #1003686)
  * Remove cryptsetup-initramfs.preinst. (Closes: #1001063)

  [ Christoph Anton Mitterer ]
  * d/rules: don't expand here-document.

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 13 Jan 2022 19:07:05 +0100

This branch is 14 commits ahead of tag debian/2%2.4.3-1

Git log:

commit 82df62ec3153fc4c04f127bc01c385faf644a0bd
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sun Apr 3 00:38:02 2022 +0200

    d/u/metadata: Add FAQ URL.

commit 4492118dd373d746069b527e10b78b3a60d7c690
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sat Apr 2 14:42:22 2022 +0200

    Fix space damage.

commit a5cdd34a43458e4d2a7ff0d9b7b402374382a75a
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sun Mar 6 21:03:47 2022 +0100

    do_stop(): Remove device holders beforehand.
    
    `cryptsetup remove` on a device with active holders is bound to fail, so
    we need to remove holders first.
    
    Closes: #1006802

commit 048f504df31277d8d47b01ffa4c864b8b282e6df
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sun Mar 6 20:56:42 2022 +0100

    foreach_cryptdev(): Process each device *after* its slaves.
    
    This is what we want generate_initrd_crypttab(): slaves need to be
    unlocked first, so need to appear first in crypttab(5).

commit 695cdedb316a7b06761cb863d643a151c11bc334
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sun Mar 6 21:05:25 2022 +0100

    d/t/control: Add 'Depends: xxd' for 'Tests: cryptdisks' stanza.

commit 59469fc6dfc27cdaac908724c13b9b98898b20f1
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Wed Feb 9 13:18:49 2022 +0100

    Add NEWS.Debian for #949336.
    
    Per Security Team suggestion
    https://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/2022-February/009307.html
    
    (Cherry-picked from 07b2db9a6cf59a6c1f24ca5b5920715c22a8cf43, replacing
    the Debian version number by something reachable from d/latest.)

commit fd89cd68c09f0e98126b5609d6150aa625583dc6
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sat Jan 15 17:39:20 2022 +0100

    DEP-8: Also run tests/ssh-plugin-test.
    
    My statement at the bottom of 1b07ae141d05a6828a1ad63b43851502bb38f883
    was incorrect, cf. https://gitlab.com/cryptsetup/cryptsetup/-/issues/700#note_811693760 .

commit 1b07ae141d05a6828a1ad63b43851502bb38f883
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 20:19:51 2022 +0100

    DEP-8: Run installed binaries and libraries through the full upstream test suite.
    
    Using machine-level isolation since some extra tests want to interact
    with the kernel, load modules, and create/remove loop devices.
    
    (We don't do this at build time because 1/ it significantly delays the
    build, and 2/ we don't really want to interact with the kernel with root
    privileges at build time.)
    
    Note: We intentionally skip ssh-plugin-test for now as it's broken in
    v2.4.3, cf. https://gitlab.com/cryptsetup/cryptsetup/-/issues/700 .

commit 63215e44cd5750ed27cee65fa8da84532dc71df6
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Sat Jan 15 15:17:42 2022 +0100

    d/README.source: Update text to reflect current practices.

commit 74936f4d478701096235d88ea8110d46cdda19e0
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 14:14:45 2022 +0100

    Salsa CI's reprotest job: Update reason for running under 'nocheck' build profile.
    
    We could add extra  build dependencies (namely kmod and a kernel image),
    but we want to skip the extra tests to avoid messing around the build
    environment with root privileges.

commit 3c32d3a41915d029236ecb2efa82035d5768ce92
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 14:14:35 2022 +0100

    Salsa CI's reprotest job: Remove '--no-diffoscope' flag.

commit c53a6bcd754d0252ef2cc141c3c2178aa563c253
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 13:46:51 2022 +0100

    Salsa CI's deploy stage: Replace `cp` with `install`.
    
    Both binaries can be found in the 'coreutils' package (which is
    Essential: yes).

commit f75c0ec883c86960b0cf5c583091a71852b9c15e
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 13:46:40 2022 +0100

    Salsa CI's deploy stage: Use apt-get(8) not apt(8).
    
    The latter isn't intended to be used in scripts.

commit 61dc4824a15b3030cdf7cbbc8122f47fb4e30a65
Author: Guilhem Moulin <guilhem@debian.org>
Date:   Fri Jan 14 13:46:18 2022 +0100

    Salsa CI's deploy stage: Use a Bullseye image.
    
    For deployment to https://cryptsetup-team.pages.debian.net/ .