-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 17 Aug 2020 23:46:34 +0200 Source: cryptsetup Binary: cryptsetup cryptsetup-bin cryptsetup-bin-dbgsym cryptsetup-dbgsym cryptsetup-initramfs cryptsetup-run cryptsetup-udeb libcryptsetup-dev libcryptsetup12 libcryptsetup12-dbgsym libcryptsetup12-udeb Architecture: source amd64 all Version: 2:2.3.3-2~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Description: cryptsetup - disk encryption support - startup scripts cryptsetup-bin - disk encryption support - command line tools cryptsetup-initramfs - disk encryption support - initramfs integration cryptsetup-run - transitional dummy package for cryptsetup cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb) libcryptsetup-dev - disk encryption support - development files libcryptsetup12 - disk encryption support - shared library libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb) Closes: 904916 913233 916649 918008 930115 930696 932625 932643 933142 934715 935702 939766 948593 949623 950628 959423 963696 964092 967853 968250 Changes: cryptsetup (2:2.3.3-2~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. (Closes: #963696) . cryptsetup (2:2.3.3-2) unstable; urgency=medium . [ Helmut Grohne ] * d/control: Annotate Build-Depends with <!nocheck>. (Closes: #964092) . [ Guilhem Moulin ] * d/rules: Build with `--with-tmpfilesdir` to force installing usr/lib/tmpfiles.d/cryptsetup.conf instead of picking the source from scripts/cryptsetup.conf. This fixes FTBS in environments containing systemd. (Closes: #968250) * Add 'bitlk' flag in crypttab(5) to force detection of Windows BitLocker volumes. (Closes: #967853) . cryptsetup (2:2.3.3-1) unstable; urgency=medium . [ Guilhem Moulin ] * New upstream bugfix release. * d/scripts/decrypt_derived: Remove useless call to `| tr -d '\n'`. * d/control: Bump debhelper compatibility level to 13. Remove debian/tmp/lib/$DEB_HOST_MULTIARCH/libcryptsetup.la as we don't install it anywhere. . [ Rob Pilling ] * d/scripts/decrypt_derived: + move an error message to standard error so it's not accidentally used as a key + exit with a success code when successful . cryptsetup (2:2.3.2-1) unstable; urgency=medium . * New upstream release. * debian/control: Set 'Rules-Requires-Root: no'. * d/initramfs/hooks/cryptroot: Unconditionally copy 'ecb' kernel module when the host CPU lacks AES-NI support. On such systems XTS needs ECB. This is a work around for #883595 on kernels 4.10 and later. (Closes: #959423) . cryptsetup (2:2.3.1-1) unstable; urgency=medium . * New upstream release. * d/initramfs/hooks/cryptroot: Don't set unused variable LIBC_DIR. . cryptsetup (2:2.3.0-1) unstable; urgency=low . * New upstream release, introducing support for BitLocker-compatible devices (BITLK format) used in Windows systems. WARNING: crypttab(5) support for these devices is currently *experimental* and requires blkid from util-linux >=2.33 (i.e., Buster or later). These devices currently have no keyword to use in the 4th field (unlike 'luks' or 'plain'), the device type is inferred from the signature instead. * crypttab(5): Make the 4th field (options) optional so we don't have to introduce a new keyword for each new device type. (That field is also optional in the systemd implementation.) Other fields (dm target name, source device, and key file) remain required. * Install cryptdisks_{start,stop} bash completion scripts to the right path/name so they are loaded automatically. This was no longer the case since 2:1.7.0-1. (Closes: #949623) * d/*.install: Replace tabs with spaces. * d/cryptdisks-functions: Fix broken $FORCE_START handling. Since 2:2.0.3-2 the SysV init scripts' "force-start" option was no longer overriding noauto/noearly. (Closes: #933142) * Move some functions to d/function from the initramfs hook. * SysV init scripts: skip devices holding the root FS and/or /usr during the shutdown phase; these file systems are still mounted at this point so any attempt to gracefully close the underlying device(s) is bound to fail. (Closes: #916649, #918008) * Bump Standards-Version to 4.5.0 (no changes necessary). . cryptsetup (2:2.2.2-3) unstable; urgency=high . * initramfs hook: Workaround fix for the libgcc_s's source location. (Closes: #950628, #939766.) Fixing #950254 will provide a better solution. . cryptsetup (2:2.2.2-2) unstable; urgency=medium . [ Guilhem Moulin ] * d/initramfs/hooks/cryptroot: On initramfs images built with MODULES=dep, include the IV generator found in the cipher specification when there is a matching kernel module. On 5.4 kernels ESSIV isn't implemented in dm_crypt anymore, but by a dedicated 'essiv' module which thus needs to be available in order to unlock dm-crypt target using 'aes-cbc-essiv:sha256'. Closes: #948593. . [ Debian Janitor ] * Set debhelper-compat version in Build-Depends. * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository, Repository-Browse. . cryptsetup (2:2.2.2-1) unstable; urgency=medium . * New upstream bugfix release. * debian/control: + Add 'procps' to the Build-Depends since the upstream test suite uses free(1). + Bump Standards-Version to 4.4.1 (no changes necessary). . cryptsetup (2:2.2.1-1) unstable; urgency=medium . * New upstream bugfix release. * Remove d/patches, applied upstream. . cryptsetup (2:2.2.0-3) unstable; urgency=medium . * Cherry pick upstream commit 8f8f0b32: Fix mapped segments overflow on 32bit architectures. Regression since 2:2.1.0-1. (Closes: #935702) . cryptsetup (2:2.2.0-2) unstable; urgency=medium . * debian/control: Add 'Multi-Arch: foreign' tag to the transitional dummy package 'crytsetup-run'. * debian/control, debian/compat: Bump debhelper compatibility level to 12. * debian/rules: Remove dh_makeshlibs(1) override; debhelper 12.3's auto detection feature subsumes our use of --add-udeb=. This fixes FTBFS with debhelper 12.5. . cryptsetup (2:2.2.0-1) unstable; urgency=medium . * New upstream release 2.2.0. Highlights include: + New LUKS2 online reencryption extension, allowing reencryption of mounted LUKS2 devices. + Optional global serialization lock for memory hard PBKDF, to workaround situations when multiple devices are unlocked in parallel, possibly exhausting memory and triggering the OOM killer. (Cf. #924560.) + Add integritysetup support for bitmap mode (Linux >=5.2). + Reduce keyslots area size in luksFormat when the header device is too small. * Remove d/patches, applied upstream. . cryptsetup (2:2.1.0-8) unstable; urgency=medium . * encrypted-boot.md: + Clarify partition layout. + encrypted-boot.md: New section 'Using a custom keyboard layout'. * d/gbp.conf: New section [export-orig] mirroring [buildpackage]. * d/gitlab-ci.yml: Add 'publish' stage and make yamllint(1) happy. * d/patches: Backport upstream commit c03e3fe8 so libcryptsetup's crypt_keyslot_add_by_volume_key() also works a on LUKS2 header where all bound key slots were deleted, like it does for LUKS1. (Closes: #934715) . cryptsetup (2:2.1.0-7) unstable; urgency=low . * debian/cryptsetup.NEWS: Mention the 'cryptsetup' and 'cryptsetup-run' package swap. * debian/control: Add 'cryptsetup-initramfs' to 'cryptsetup's Recommends:, so upgrading systems pull it automatically on upgrade. (cryptsetup <2:2.1.0-6 was a dummy transitional package depending on cryptsetup-run and cryptsetup-initramfs.) Closes: #932643. * debian/control: Add 'cryptsetup-run' to 'cryptsetup's Recommends. This avoids it being removed by `apt upgrade --autoremove` from <2:2.1.0-6, thus avoids the old cryptsetup-run's prerm script showing a scary (but moot) warning. After upgrading the prerm script is gone and the package can be removed without troubles, so we can get rid of it after Bullseye. (Closes: #932625.) * cryptsetup-initramfs: Add loud warning upon "prerm remove" if there are mapped crypt devices (like for cryptsetup.prerm). * Thanks to David Prévot for helping with the upgrade path! . cryptsetup (2:2.1.0-6) unstable; urgency=low . * debian/control: + Add 'Multi-Arch: foreign' tags to 'cryptsetup-bin' and 'crytsetup-run', as binaries from these packages are architecture independent. (Closes: #930115) + Add 'Build-Depends: jq, xxd' as the jq(1) and xxd(1) executables are required for some upstream tests (skipped if the executables are not found in $PATH). + Swap 'cryptsetup' and 'cryptsetup-run' packages: the former now contains init scripts, libraries, keyscripts, etc. while the latter is now a transitional dummy package. + Remove obsolete cryptsetup.maintscript. + Bump Standards-Version to 4.4.0 (no changes necessary). * debian/*: + Fix path names for /usr/share/doc/cryptsetup*/**. (Closes: #904916). + Remove compatibility warnings regarding setting 'CRYPTSETUP' in the initramfs hook configuration. The variable is no longer honored, and cryptsetup is always integrated to the initramfs when the 'cryptsetup-initramfs' package is installed. * debian/doc/pandoc/encrypted-boot.md: Minor refactoring. * debian/gitlab-ci.yml: Adapt pandoc flags to Debian 9 (pass '-S'). * debian/initramfs/conf-hook: Clarify that KEYFILE_PATTERN isn't expanded for crypttab(5) entries with a 'keyscript=' option. (Closes: #930696) * debian/doc/crypttab.xml: Point to README.initramfs in the "See Also" section. (Closes: #913233) Checksums-Sha1: 87d6bfa8de5907c4cc1a86cb64209b2214d8429a 2897 cryptsetup_2.3.3-2~bpo10+1.dsc f5064e838c6d952ab1935edd20f328d98abe4103 114316 cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz 94bd114bfa560b35732c4b98741420a7e9633463 231052 cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb 0b7b7f2ab10b315e6ad44f9a83ac38f9991b8d9b 398156 cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb dff22f6a0c638c07e411973a9406aa4d7a3569ba 18480 cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb f5f2ab611bb9334120260465e432ec1433dd6357 71068 cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb 4785a50c9ff84b21b20f8771c94019f3501418e2 53404 cryptsetup-run_2.3.3-2~bpo10+1_all.deb da2fb944af4d33bbf174bfc97591137012f2b8fb 64804 cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb 33a715c70c5358b77c31d8de8216d411e179f858 9689 cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo 0759968c6cd8fad6653b68cf9c66f1b9b3331a2e 218876 cryptsetup_2.3.3-2~bpo10+1_amd64.deb fae970971bf96e90528c0839c583dae150e29f4b 70460 libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb 033ed6193720a3363835808a1164e50833940722 536992 libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb 71e58bc52fd4f2968e9138bc4d0418767fdc6d08 186384 libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb 16678deefba59dcf1a3e663d7b8e7fe09fcd59ae 239264 libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb Checksums-Sha256: 4acbeb6a597430ad7e01cf8ae91c27ead7386b81de177df7d64282c2dc5082c9 2897 cryptsetup_2.3.3-2~bpo10+1.dsc a036b6c2e126eddbdd7a535d7a51076cbc68001bd96a5ef3bf5d042fde09fd5f 114316 cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz 346f42d360220819fe076a934aaaf3ec4a79a30221ff7bac892feefc0bf5bbf2 231052 cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb 78692038aab4759f91c264b44373bf728a92e3e0e7ade2315eaa82aa2e55e2ca 398156 cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb 1533256eb12e18d8a1b21133e22003c79b355cd45f6c2e951efd6006b9dc225a 18480 cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb 7aef0c17a5bb79f7ef9f1ac2f08fac95ffc073e54bc60e60fa426b8215223142 71068 cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb 71bf0f7cc2cb598c9bd9e722ac64cc2c8f23efdc106fd18eefc16a98b182a8b9 53404 cryptsetup-run_2.3.3-2~bpo10+1_all.deb 13dffd1b499e3a8e3705aa6261018422bac489bb48e42c5ce1525606affe676e 64804 cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb b7d5614eb07a36241e91be48cea8c506ec99652ae5a0d04e7744f34a9211312e 9689 cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo a88819153cb76cfa0122f645d652a90910cbc3bcd765ba80c43cebfe74bc8239 218876 cryptsetup_2.3.3-2~bpo10+1_amd64.deb 0f297cbd49a207d14c2d1ad23411bf25fc11152d31b4bb382693c5e9dcc6fa28 70460 libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb 2900d2109b62d5606721612bf24baf0047dce40a05f650fec09807124c9729a8 536992 libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb acbbe45c9148878a611ce65a6098b418add647ad2431c6d6ed202d904044c1ce 186384 libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb 5f00a824cc8d2a5d1931c03b2e0eb1ce6d7b5df8e2daa8c628377708435cebfd 239264 libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb Files: 390bca37944c939cf2df0e75f36a3548 2897 admin optional cryptsetup_2.3.3-2~bpo10+1.dsc 3a209bcd73d16760929fda865e3f4aec 114316 admin optional cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz ee48329e106060bf8fd3e021d27aa507 231052 debug optional cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb f144074d4b47626dac7e5aa30c78317d 398156 admin optional cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb d58bee010f5a6c8b1a77db7de5257706 18480 debug optional cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb 154ff8d0531faeaa7b1091f6caaa1fbe 71068 admin optional cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb b28735206ff5c61a73cb25a10fa301d7 53404 oldlibs optional cryptsetup-run_2.3.3-2~bpo10+1_all.deb 805f651deb1e14a242342066d04bb711 64804 debian-installer optional cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb 53919af5db7611a06d05ec4f3671083e 9689 admin optional cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo 73823b73dd767fec1016fbf0efb860f6 218876 admin optional cryptsetup_2.3.3-2~bpo10+1_amd64.deb 44ab928a572f29d68a5d4a35ecd221d7 70460 libdevel optional libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb b0720d09ad14e44e5bd7598c5ccff396 536992 debug optional libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb 2c891c99b50979ec4dd7ed7d925f4ed5 186384 debian-installer optional libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb 1d3d2a9b27181d0e8d037f727fa4814c 239264 libs optional libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl87BAgACgkQ05pJnDwh pVLcnA//YkSCy1F1QjzMJu2Fz+v9CkW8hhPkUfo+0E4qJvBLFuF5rm8addMfhPm9 e9/TBbV1Aw9hJDh3UZezeOWtYiv3+K4w1zbYQSkhUXzbU58rU3LAaHAkwa2vZYOn Ve1+ZbMWMwqgw4OFa8pgLqzTx2lxZC9zv+8FRPeNESlFUbqX/jjtza6+aABgHtFK hSVIq4821K8Y6gNFFWrNQBHsQcDty+g8yq/cw86ZbwsN7YN80+7btSpNA4PuxkNs TYCHef5BgJJguuuDAz9UudU1D1hstKm3+aM/liHy3B9dWaS2oynyQhVYfwSK0bs0 G6y2QhS0/uXTmKrXgHIyBCH1HU/0jAjWeFAao2VJiqBTCfERAk4+JnQVNS4lkiIp HSUX6xyHah8gMu4LElgvbKLWLDWhIPpgVdDVdY5qYFiESOwcC2oSuWtCUuoq1Otk wYrtt9bGk5em8uiyg8sumvOm1X/wBHRVTDruqryA4dTWDR6qaSMN+RVYBeV2Src5 msctGMRgtRM88/ns920mDRRAAQ8fF34KAiIPMdEvJYyHKyak9xv2Gf7cFRxrUqVM 4daAZ+wfg/COdsx6FRQClrkZbaFlb5GfnpMDLj1/U4BvAm2g7cBBc3DfPVwGDrnU mG/5V4irNd9W/gfqdQti3V3txm+JZ2myl/MWINxzP+ZGINrRz+4= =rvYf -----END PGP SIGNATURE-----
