cryptsetup (2:2.4.3-1)
[PTS] [DDPO]
COMMITS: VCS has seen 14 commits since the debian/2%2.4.3-1 tag
- Git: https://salsa.debian.org/cryptsetup-team/cryptsetup.git -b debian/latest
-
- Branch: debian/latest
- Path: debian/changelog
- Browser: https://salsa.debian.org/cryptsetup-team/cryptsetup
- Last scan: 2022-05-26 22:53:10+00
- Next scan: 2022-06-03 21:27:00+00
- Merge requests: 5
- CI pipeline status: success
- Debian changelog in Git:
cryptsetup (2:2.4.3-1) unstable; urgency=high
[ Guilhem Moulin ]
* New upstream security release 2.4.3, with fix for CVE-2021-4122:
decryption through LUKS2 reencryption crash recovery. (Closes: #1003685,
#1003686)
* Remove cryptsetup-initramfs.preinst. (Closes: #1001063)
[ Christoph Anton Mitterer ]
* d/rules: don't expand here-document.
-- Guilhem Moulin <guilhem@debian.org> Thu, 13 Jan 2022 19:07:05 +0100
- This branch is 14 commits ahead of tag debian/2%2.4.3-1
- Git log:
commit 82df62ec3153fc4c04f127bc01c385faf644a0bd
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sun Apr 3 00:38:02 2022 +0200
d/u/metadata: Add FAQ URL.
commit 4492118dd373d746069b527e10b78b3a60d7c690
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sat Apr 2 14:42:22 2022 +0200
Fix space damage.
commit a5cdd34a43458e4d2a7ff0d9b7b402374382a75a
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sun Mar 6 21:03:47 2022 +0100
do_stop(): Remove device holders beforehand.
`cryptsetup remove` on a device with active holders is bound to fail, so
we need to remove holders first.
Closes: #1006802
commit 048f504df31277d8d47b01ffa4c864b8b282e6df
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sun Mar 6 20:56:42 2022 +0100
foreach_cryptdev(): Process each device *after* its slaves.
This is what we want generate_initrd_crypttab(): slaves need to be
unlocked first, so need to appear first in crypttab(5).
commit 695cdedb316a7b06761cb863d643a151c11bc334
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sun Mar 6 21:05:25 2022 +0100
d/t/control: Add 'Depends: xxd' for 'Tests: cryptdisks' stanza.
commit 59469fc6dfc27cdaac908724c13b9b98898b20f1
Author: Guilhem Moulin <guilhem@debian.org>
Date: Wed Feb 9 13:18:49 2022 +0100
Add NEWS.Debian for #949336.
Per Security Team suggestion
https://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/2022-February/009307.html
(Cherry-picked from 07b2db9a6cf59a6c1f24ca5b5920715c22a8cf43, replacing
the Debian version number by something reachable from d/latest.)
commit fd89cd68c09f0e98126b5609d6150aa625583dc6
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sat Jan 15 17:39:20 2022 +0100
DEP-8: Also run tests/ssh-plugin-test.
My statement at the bottom of 1b07ae141d05a6828a1ad63b43851502bb38f883
was incorrect, cf. https://gitlab.com/cryptsetup/cryptsetup/-/issues/700#note_811693760 .
commit 1b07ae141d05a6828a1ad63b43851502bb38f883
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 20:19:51 2022 +0100
DEP-8: Run installed binaries and libraries through the full upstream test suite.
Using machine-level isolation since some extra tests want to interact
with the kernel, load modules, and create/remove loop devices.
(We don't do this at build time because 1/ it significantly delays the
build, and 2/ we don't really want to interact with the kernel with root
privileges at build time.)
Note: We intentionally skip ssh-plugin-test for now as it's broken in
v2.4.3, cf. https://gitlab.com/cryptsetup/cryptsetup/-/issues/700 .
commit 63215e44cd5750ed27cee65fa8da84532dc71df6
Author: Guilhem Moulin <guilhem@debian.org>
Date: Sat Jan 15 15:17:42 2022 +0100
d/README.source: Update text to reflect current practices.
commit 74936f4d478701096235d88ea8110d46cdda19e0
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 14:14:45 2022 +0100
Salsa CI's reprotest job: Update reason for running under 'nocheck' build profile.
We could add extra build dependencies (namely kmod and a kernel image),
but we want to skip the extra tests to avoid messing around the build
environment with root privileges.
commit 3c32d3a41915d029236ecb2efa82035d5768ce92
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 14:14:35 2022 +0100
Salsa CI's reprotest job: Remove '--no-diffoscope' flag.
commit c53a6bcd754d0252ef2cc141c3c2178aa563c253
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 13:46:51 2022 +0100
Salsa CI's deploy stage: Replace `cp` with `install`.
Both binaries can be found in the 'coreutils' package (which is
Essential: yes).
commit f75c0ec883c86960b0cf5c583091a71852b9c15e
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 13:46:40 2022 +0100
Salsa CI's deploy stage: Use apt-get(8) not apt(8).
The latter isn't intended to be used in scripts.
commit 61dc4824a15b3030cdf7cbbc8122f47fb4e30a65
Author: Guilhem Moulin <guilhem@debian.org>
Date: Fri Jan 14 13:46:18 2022 +0100
Salsa CI's deploy stage: Use a Bullseye image.
For deployment to https://cryptsetup-team.pages.debian.net/ .