Commit Graph

175 Commits

Author SHA256 Message Date
82af2dfa2d Accepting request 1098511 from home:pmonrealgonzalez:branches:security
- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
    - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
    - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
    - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch

OBS-URL: https://build.opensuse.org/request/show/1098511
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=190
2023-07-13 11:20:07 +00:00
b44b295cd3 Accepting request 1093121 from home:pmonrealgonzalez:branches:security
- Enable running the regression test suite.
- Force a regeneration of the man pages from AsciiDoc.
- Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc.

- FIPS: Remove not needed libcryptsetup12-hmac package that contains
  the HMAC checksums for integrity checking for FIPS. [bsc#1185116]
  * Remove the cryptsetup-rpmlintrc file.
  * Remove not needed fipscheck dependency.

OBS-URL: https://build.opensuse.org/request/show/1093121
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=188
2023-06-15 12:05:44 +00:00
43e9b52bc7 Accepting request 1064729 from home:AndreasStieger:branches:security
cryptsetup 2.6.1

OBS-URL: https://build.opensuse.org/request/show/1064729
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=186
2023-02-12 21:21:51 +00:00
cf385930c9 Accepting request 1052843 from home:lnussel:usrmerge
Replace transitional %usrmerged macro with regular version check (boo#1206798)

OBS-URL: https://build.opensuse.org/request/show/1052843
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=184
2023-01-04 16:08:29 +00:00
8cea81ce7b Accepting request 1038690 from home:polslinux:branches:security
- cryptsetup 2.6.0:
  * Introduce support for handling macOS FileVault2 devices (FVAULT2).
  * libcryptsetup: no longer use global memory locking through mlockall()
  * libcryptsetup: process priority is increased only for key derivation
    (PBKDF) calls.
  * Add new LUKS keyslot context handling functions and API.
  * The volume key may now be extracted using a passphrase, keyfile, or
    token. For LUKS devices, it also returns the volume key after
    a successful crypt_format call.
  * Fix --disable-luks2-reencryption configuration option.
  * cryptsetup: Print a better error message and warning if the format
    produces an image without space available for data.
  * Print error if anti-forensic LUKS2 hash setting is not available.
    If the specified hash was not available, activation quietly failed.
  * Fix internal crypt segment compare routine if the user
    specified cipher in kernel format (capi: prefix).
  * cryptsetup: Add token unassign action.
    This action allows removing token binding on specific keyslot.
  * veritysetup: add support for --use-tasklets option.
    This option sets try_verify_in_tasklet kernel dm-verity option
    (available since Linux kernel 6.0) to allow some performance
    improvement on specific systems.
  * Provide pkgconfig Require.private settings.
    While we do not completely provide static build on udev systems,
    it helps produce statically linked binaries in certain situations.
  * Always update automake library files if autogen.sh is run.
    For several releases, we distributed older automake scripts by mistake.
  * reencryption: Fix user defined moved segment size in LUKS2 decryption.
    The --hotzone-size argument was ignored in cases where the actual data
    size was less than the original LUKS2 data offset.
  * Delegate FIPS mode detection to configured crypto backend.
    System FIPS mode check no longer depends on /etc/system-fips file.
  * Update documentation, including FAQ and man pages.

OBS-URL: https://build.opensuse.org/request/show/1038690
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=182
2022-11-29 07:29:17 +00:00
59aec6d066 Accepting request 1003354 from home:bluca:branches:security
- Add virtual provides for 'integritysetup' and 'veritysetup' to match
  package names provided by Fedora/RHEL, to allow the same set of
  dependencies to be used across all RPM distributions.

OBS-URL: https://build.opensuse.org/request/show/1003354
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=180
2022-09-14 07:18:13 +00:00
0ffce94442 Accepting request 999046 from home:lnussel:branches:security
- cryptsetup 2.5.0:
  * Split manual pages into per-action pages and use AsciiDoc format. 
  * Remove cryptsetup-reencrypt tool from the project and move reencryption
    to already existing "cryptsetup reencrypt" command.
    If you need to emulate the old cryptsetup-reencrypt binary, use simple
    wrappers script running "exec cryptsetup reencrypt $@".
  * LUKS2: implement --decryption option that allows LUKS removal.
  * Fix decryption operation with --active-name option and restrict
    it to be used only with LUKS2.
  * Do not refresh reencryption digest when not needed.
    This should speed up the reencryption resume process.
  * Store proper resilience data in LUKS2 reencrypt initialization.
    Resuming reencryption now does not require specification of resilience
    type parameters if these are the same as during initialization.
  * Properly wipe the unused area after reencryption with datashift in
    the forward direction.
  * Check datashift value against larger sector size.
    For example, it could cause an issue if misaligned 4K sector appears
    during decryption.
  * Do not allow sector size increase reencryption in offline mode.
  * Do not allow dangerous sector size change during reencryption.
  * Ask the user for confirmation before resuming reencryption.
  * Do not resume reencryption with conflicting parameters.
  * Add --force-offline-reencrypt option.
  * Do not allow nested encryption in LUKS reencrypt.
  * Support all options allowed with luksFormat with encrypt action.
  * Add resize action to integritysetup.
  * Remove obsolete dracut plugin reencryption example.
  * Fix possible keyslot area size overflow during conversion to LUKS2.
  * Allow use of --header option for cryptsetup close.

OBS-URL: https://build.opensuse.org/request/show/999046
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=178
2022-08-24 11:32:11 +00:00
ee04894715 Accepting request 946498 from home:AndreasStieger:branches:security
cryptsetup 2.4.3
    CVE-2021-4122, boo#1194469

OBS-URL: https://build.opensuse.org/request/show/946498
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=177
2022-01-17 09:00:02 +00:00
1e4cc6eca2 - cryptsetup 2.4.1
* Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.
- cryptsetup 2.4.0 (jsc#SLE-20275)

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=176
2021-09-16 15:25:13 +00:00
cddcbab746 - As YaST passes necessary parameters to cryptsetup anyway, we do
not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=175
2021-08-25 13:47:31 +00:00
002330efa3 update
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=174
2021-08-23 05:09:18 +00:00
9b4f111a1b add feature reference
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=173
2021-08-12 13:00:47 +00:00
c25748051d - need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
using Argon.

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=172
2021-08-03 13:44:07 +00:00
db71e925b5 merge
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=171
2021-08-02 15:43:50 +00:00
8d2c1398f0 - crypsetup 2.4.0~rc1
* External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.
- switch to LUKS2 default format

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=170
2021-08-02 15:10:27 +00:00
45054f2786 - cryptsetup 2.3.6:
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=169
2021-07-01 12:55:11 +00:00
8725925458 Accepting request 878732 from home:AndreasStieger:branches:security
cryptsetup 2.3.5

OBS-URL: https://build.opensuse.org/request/show/878732
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=167
2021-03-15 07:59:10 +00:00
d173fab52a typo
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=165
2020-12-08 12:03:55 +00:00
9197d62a77 - SLE marker: implements jsc#SLE-5911, bsc#116558, jsc#SLE-145149
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=164
2020-12-08 08:53:32 +00:00
c6c715c2f5 Accepting request 849583 from home:lnussel:usrmove
- prepare usrmerge (boo#1029961)

OBS-URL: https://build.opensuse.org/request/show/849583
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=162
2020-11-20 09:26:02 +00:00
d9929bafef Accepting request 832026 from home:lnussel:branches:security
- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.

OBS-URL: https://build.opensuse.org/request/show/832026
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=160
2020-09-04 08:13:03 +00:00
91d92afad9 Accepting request 810023 from home:AndreasStieger:branches:security
cryptsetup 2.3.3

OBS-URL: https://build.opensuse.org/request/show/810023
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=158
2020-05-29 15:01:56 +00:00
7b6ff2d0f5 - Split translations to -lang package
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=156
2020-04-02 14:37:41 +00:00
8873d8f729 - New version to 2.3.1
* Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=155
2020-04-02 14:27:54 +00:00
c833c93fcf Accepting request 769866 from home:polslinux:branches:security
- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).

OBS-URL: https://build.opensuse.org/request/show/769866
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=153
2020-02-04 16:53:39 +00:00
6a28f3c770 Accepting request 739355 from home:vitezslav_cizek:branches:security
- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)

OBS-URL: https://build.opensuse.org/request/show/739355
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=151
2019-12-11 15:11:37 +00:00
a86aef0410 retrofit bug number for sle
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=149
2019-05-09 11:56:46 +00:00
b860f84edd Accepting request 676570 from home:jengelh:branches:security
- Use noun phrase in summary.

OBS-URL: https://build.opensuse.org/request/show/676570
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=147
2019-02-18 12:27:45 +00:00
901c97104c - New version 2.1.0
* The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=146
2019-02-15 14:36:10 +00:00
3dd02a4dcc Accepting request 645498 from home:lnussel:branches:security
- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
     - a device is unusable (not a block device, no access, etc.),
     - a LUKS device is not detected,
     - LUKS header load code detects unsupported version,
     - a keyslot decryption fails (also happens in the cipher check),
     - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.

OBS-URL: https://build.opensuse.org/request/show/645498
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=144
2018-10-31 08:59:56 +00:00
405535408f fix
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=142
2018-08-21 09:23:54 +00:00
b9976bf5b8 - New version 2.0.4
Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot <number> unlocked/created/removed.
    For token actions: Token <number> created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.

OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=141
2018-08-21 07:44:40 +00:00
6a3a5ab46f Accepting request 574741 from home:AndreasStieger:branches:security
untested 2.0.1

OBS-URL: https://build.opensuse.org/request/show/574741
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=139
2018-02-09 15:48:12 +00:00
d84b0a491a OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=137 2018-01-09 09:48:53 +00:00
7cb1ae6064 Accepting request 561151 from home:archie172:branches:security
- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements

OBS-URL: https://build.opensuse.org/request/show/561151
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=136
2018-01-09 08:52:58 +00:00
04c288cc69 Accepting request 492031 from home:pluskalm:branches:security
- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode.
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.

OBS-URL: https://build.opensuse.org/request/show/492031
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=134
2017-05-04 09:42:46 +00:00
96565497db Accepting request 480910 from home:pluskalm:branches:security
- Update to version 1.7.4:

OBS-URL: https://build.opensuse.org/request/show/480910
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=132
2017-03-21 11:44:43 +00:00
Alexander Naumov
5b2dc6e33d Accepting request 422113 from home:Alexander_Naumov:branches:security
Update to version 1.7.2

OBS-URL: https://build.opensuse.org/request/show/422113
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=130
2016-08-26 11:48:47 +00:00
4f8e236159 Accepting request 352690 from home:benoit_monin:branches:security
update to 1.7.0

OBS-URL: https://build.opensuse.org/request/show/352690
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=128
2016-02-02 11:57:35 +00:00
36e909287e Accepting request 349019 from home:tiwai:branches:security
- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)

OBS-URL: https://build.opensuse.org/request/show/349019
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=126
2015-12-21 11:53:09 +00:00
ce789c545b Accepting request 329788 from home:adra:branches:security
Update to 1.6.8

OBS-URL: https://build.opensuse.org/request/show/329788
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=124
2015-10-12 09:14:03 +00:00
2ebbcc2226 Accepting request 295595 from home:elvigia:branches:security
- Enable verbose build log. 

- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)

OBS-URL: https://build.opensuse.org/request/show/295595
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=122
2015-04-13 09:46:51 +00:00
da8c646220 Accepting request 294152 from home:pluskalm:branches:security
- Update to 1.6.7

OBS-URL: https://build.opensuse.org/request/show/294152
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=120
2015-04-08 12:54:34 +00:00
245087ea13 Accepting request 249180 from home:adra:branches:security
version 1.6.6

OBS-URL: https://build.opensuse.org/request/show/249180
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=118
2014-09-15 09:54:57 +00:00
a823d6ea4c Accepting request 245748 from home:msmeissn:branches:security
- Use --enable-gcrypt-pbkdf2 to use the PBKDFv2 method from libgcrypt.

OBS-URL: https://build.opensuse.org/request/show/245748
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=116
2014-08-26 06:33:53 +00:00
9d75fbda81 Accepting request 244369 from home:adra:branches:security
version 1.6.5, Updated build requirements

OBS-URL: https://build.opensuse.org/request/show/244369
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=114
2014-08-13 07:59:19 +00:00
110c3d1016 Accepting request 244329 from home:msmeissn:branches:security
- libcryptsetup4-hmac split off contain the hmac for FIPS certification

OBS-URL: https://build.opensuse.org/request/show/244329
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=113
2014-08-12 13:38:20 +00:00
5c09e34343 Accepting request 235564 from home:msmeissn:branches:security
- version 1.6.4
  - new tarball / signature location
  * Implement new erase (with alias luksErase) command.
  * Add internal "whirlpool_gcryptbug hash" for accessing flawed
    Whirlpool hash in gcrypt (requires gcrypt 1.6.1 or above).
  * Allow to use --disable-gcrypt-pbkdf2 during configuration
    to force use internal PBKDF2 code.
  * Require gcrypt 1.6.1 for imported implementation of PBKDF2
    (PBKDF2 in gcrypt 1.6.0 is too slow).
  * Add --keep-key to cryptsetup-reencrypt.
  * By default verify new passphrase in luksChangeKey and luksAddKey
    commands (if input is from terminal).
  * Fix memory leak in Nettle crypto backend.
  * Support --tries option even for TCRYPT devices in cryptsetup.
  * Support --allow-discards option even for TCRYPT devices.
    (Note that this could destroy hidden volume and it is not suggested
    by original TrueCrypt security model.)
  * Link against -lrt for clock_gettime to fix undefined reference
    to clock_gettime error (introduced in 1.6.2).
  * Fix misleading error message when some algorithms are not available.
  * Count system time in PBKDF2 benchmark if kernel returns no self
    usage info.

OBS-URL: https://build.opensuse.org/request/show/235564
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=111
2014-07-08 11:55:23 +00:00
a5a193c2f7 Accepting request 231181 from home:dirkmueller:branches:security
- remove dependency on gpg-offline (source_validator already
  checks for gpg integrity)

OBS-URL: https://build.opensuse.org/request/show/231181
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=109
2014-04-23 16:25:27 +00:00
7d203f1cbd Accepting request 210973 from home:elvigia:branches:security
- version 1.6.3 
* Fix cryptsetup reencryption tool to work properly 
  with devices using 4kB sectors.
* Rewrite cipher benchmark loop which was unreliable on very fast machines.
* Support activation of old TrueCrypt containers (requires kernel 3.13)
* Other bugfixes.

OBS-URL: https://build.opensuse.org/request/show/210973
OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=107
2013-12-18 07:35:57 +00:00