-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 09 Dec 2016 01:18:17 +0100 Source: cryptsetup Binary: cryptsetup cryptsetup-bin libcryptsetup4 libcryptsetup-dev cryptsetup-udeb libcryptsetup4-udeb Architecture: source amd64 Version: 2:1.7.3-3 Distribution: unstable Urgency: medium Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel@lists.alioth.debian.org> Changed-By: Jonas Meurer <mejo@debian.org> Description: cryptsetup - disk encryption support - startup scripts cryptsetup-bin - disk encryption support - command line tools cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb) libcryptsetup-dev - disk encryption support - development files libcryptsetup4 - disk encryption support - shared library libcryptsetup4-udeb - disk encryption support - shared library (udeb) (udeb) Closes: 842951 844050 Changes: cryptsetup (2:1.7.3-3) unstable; urgency=medium . [ Jonas Meurer ] * debian/scripts/decrypt_ssl: fix script to actually output the decrypted key. Apparently this script has been broken since June 2008. Doesn't seem like anybody is using it. Thanks to g1 for spotting and reporting the error. (Closes: #844050) * debian/initramfs/cryptroot-script: + limit the sleep after max passphrase attempts to devices for the rootfs. This mitigates the negative impact in case of broken keyscripts etc. + add $crypttarget to each message to provide more context. * debian/initramfs/cryptroot-hook: fix sanity check for key files on root fs in get_device_opts(): detect if processed device is a root (parent) device even for LVM setups. (closes: #842951) * debian/README.initramfs: minor fix to the decrypt_derived keyscript section: now that systemd is standard, 'cryptdisks_start' should be used instead of '/etc/init.d/cryptdisks start'. * debian/manpages/crypttab.xml: add a warning to the 'keyscript' option that systemd doesn't support the option (yet) and mention the possible workaround to process the devices in question in the initramfs. . [ Guilhem Moulin ] * add debian/gbp.conf to set the upstream tag to "v%(version%.%_)s". As this enables git-buildpackage >= 0.8.7 to automatically generate orig.tar.gz, step nr. 5 is now removed from debian/README.source. * debian/compat: bump debhelper compatibility version to 9. * debian/initramfs/cryptroot-hook: + fix tab damage for consistency with the rest of the code + better warning for deprecated settings + fix sanity check for key files in get_device_opts(): print a warning if the key file isn't on the root FS, or if the root device is not encrypted, even for LVM setups. + fix sanity check for key files in get_device_opts(): print a warning if the processed device is a resume device, even for LVM setups. + fix runtime error in get_lvm_deps() if the first argument is either missing or the empty string. + reset IFS after processing $rootopts in get_device_opts(); the missing linefeed in $IFS caused LVM logical volumes spaning over multiple PVs not to have their parent devices detected correctly. Checksums-Sha1: 2c5a6c2fdaeb26c743e4faa1feafcd7470976a4c 2708 cryptsetup_1.7.3-3.dsc 8f29aa851be8d05214ca3ea640f5427b27bc9582 93572 cryptsetup_1.7.3-3.debian.tar.xz ce8fe5b9c583dbfe965bac12f9f9fa88c13593d0 112514 cryptsetup-bin-dbgsym_1.7.3-3_amd64.deb ed2e41a1157f99915704177fcef0c5239b905925 221710 cryptsetup-bin_1.7.3-3_amd64.deb ea58a33b5216ff24335a43f17b7068b6fb90b3d7 17060 cryptsetup-dbgsym_1.7.3-3_amd64.deb a26d168719afd13b2fefc1549a92823dbbc7e2d5 38946 cryptsetup-udeb_1.7.3-3_amd64.udeb 235a1330d6167ce5053d58e01eec5b0c6bd46fd1 7466 cryptsetup_1.7.3-3_amd64.buildinfo b535193bb919850e7487a986ee7ad6e3ca9b5104 173302 cryptsetup_1.7.3-3_amd64.deb ac39691f30aa19907233f8379fd36711a72273aa 54530 libcryptsetup-dev_1.7.3-3_amd64.deb cf3029f6e50dcd01aeeca79bf6717cd767e6527f 174856 libcryptsetup4-dbgsym_1.7.3-3_amd64.deb fe22d952d4f89fc391a8989142daa7de2db3256e 65818 libcryptsetup4-udeb_1.7.3-3_amd64.udeb c155bd0ba292f7ccd5fcef6e608399a51ff46171 108268 libcryptsetup4_1.7.3-3_amd64.deb Checksums-Sha256: d94f5ff7728a748e5218b180c29e3d60186fce4c3c6f25c0a744e0decfef37e8 2708 cryptsetup_1.7.3-3.dsc 7bddb928866d3037d62377c12514e5dbba517501eb0f771dceac7f9fa2bf27f4 93572 cryptsetup_1.7.3-3.debian.tar.xz a86660433df22c1e96dc4d29f5088e44dc66662dfba1b49b91a7d1e3f3a236d0 112514 cryptsetup-bin-dbgsym_1.7.3-3_amd64.deb 4faf8cc56b860647455f5b3fbaaebd798a08c85b0194ad601740901e2a9f3610 221710 cryptsetup-bin_1.7.3-3_amd64.deb 983aa7119191d2680d837a51f5f1286a266a69b458261bec4149dff747ee71b2 17060 cryptsetup-dbgsym_1.7.3-3_amd64.deb 76bc21fe6e3d8255f7c45b11375d0643ef9c5853009bc20f3eee684dc1899a58 38946 cryptsetup-udeb_1.7.3-3_amd64.udeb 541814af01c8fa7c9e859668d50fc31c22fb5f6c3d09ef87c265ca33bc973209 7466 cryptsetup_1.7.3-3_amd64.buildinfo 099df52531652fa407b46c4de29c8f527187900390a11962ce15c5a11272f150 173302 cryptsetup_1.7.3-3_amd64.deb b36b14383402c08914f235cc10c41c7188022074a4c2bc4a33dc5bc43a994e00 54530 libcryptsetup-dev_1.7.3-3_amd64.deb fb870f158e6e741dfa99c8790b9552f4a1daa5dd0fd95a8d0737653b74d8a6f2 174856 libcryptsetup4-dbgsym_1.7.3-3_amd64.deb 87cb705989388f10de722024f3ad95de7871f7b5f2dd74cade771ab8ec1b80ee 65818 libcryptsetup4-udeb_1.7.3-3_amd64.udeb 1e96ee49d9322f647fc66749fb8429f9b63c6ccea456937538aec13fd4b4d03e 108268 libcryptsetup4_1.7.3-3_amd64.deb Files: ce8fcde0d3b0caae210690e3c0958702 2708 admin optional cryptsetup_1.7.3-3.dsc c92aad669fa0b6640c1f5445e1295039 93572 admin optional cryptsetup_1.7.3-3.debian.tar.xz 4d5a2c6f120fbfc80206ed16f83db8ba 112514 debug extra cryptsetup-bin-dbgsym_1.7.3-3_amd64.deb ae87d4789e3ecadf490bac05bbf36a93 221710 admin optional cryptsetup-bin_1.7.3-3_amd64.deb a62743ee9924f4d29d4939e10b4b3b4e 17060 debug extra cryptsetup-dbgsym_1.7.3-3_amd64.deb fdeda2c554cbe11fe6f94550bebb1cdf 38946 debian-installer optional cryptsetup-udeb_1.7.3-3_amd64.udeb 3e2eca60b7eeaef3c469c583a95da924 7466 admin optional cryptsetup_1.7.3-3_amd64.buildinfo 4509e0482cc2c6bf20ce6a79ee694ebf 173302 admin optional cryptsetup_1.7.3-3_amd64.deb f16f67b7a34727c24fb3013905a9bfa3 54530 libdevel optional libcryptsetup-dev_1.7.3-3_amd64.deb 1532fed314b78ad2af53b74b7e530e8c 174856 debug extra libcryptsetup4-dbgsym_1.7.3-3_amd64.deb 765d5034c043dbc5b7bc9d8ec6d3db5b 65818 debian-installer optional libcryptsetup4-udeb_1.7.3-3_amd64.udeb 5cbbd7c7f61f8e9de8700da35b143531 108268 libs optional libcryptsetup4_1.7.3-3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEELIzSg9Pv30M4kOeDUmLn/0kQSf4FAlhK1pIACgkQUmLn/0kQ Sf4SPg/9EhIgmcxaswliX2GWLnm4ayUGPEcVq3nODDxfZK0SEj/rLq5IGtk+4n// l68dtxzFymgA4nLYGFbh2ogiS9Uz1my/rsUIz8lHJSgfJBayD/2UGKseDNyc1UEf skreymu/K7FoUmN6JZcPb+gtZw4zWm44HmatdO3y75JgjodkEbBHZj8xY1VMvi98 Yv4V6MyhlgNKF1zIvAzN/aTmQQLNJIOrS0lFs/Y4E53xlOUmU45QG0rQeoARlweg FWXPxIEcf2MXEVSiIOEjuaDmQ/QpQU9CxZrtMshmwnTjHWh4UNpqKPW37OTP0YfR Ln3gpNUNMGGJMdH5GW1N+Icj0p0ED7BJoEKFMg583bThlTlqCJmBwT9PDS1EZsgv AIigJytqaM400dp3q1uumEMuQAzcPcZqPOYvCM7O04cYOz18wcT6ca0PPb8yFP++ nHZ+CqXznAVhgBR4I8Fr0AbJXX8Gx5C/AoBc/COmHrI3gbzRd1wDuvKZw33xAzqo ErMnnsu+FssQRsjivNWuffzHmaCVZO6TWleQP8OXyD4EkNCNxQx3yPI8qUqgVnW9 gNd9nwc30f6jMTwclvJxlvQlnIdY9bGyl0GGO/i3w2EUbBUY1gLzylcIxD3o0hlL dNlxvvRpYeeObfX113i6jvuaTd8+hRxalIABNSRXIV1y1erBLXI= =G0j0 -----END PGP SIGNATURE-----