From 96565497db05d14500b0b0e1ecfc2c920bcbf30e9899f5e3662675449a698e46 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 21 Mar 2017 11:44:43 +0000 Subject: [PATCH] Accepting request 480910 from home:pluskalm:branches:security - Update to version 1.7.4: OBS-URL: https://build.opensuse.org/request/show/480910 OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=132 --- cryptsetup-1.7.2.tar.sign | 17 ----------------- cryptsetup-1.7.2.tar.xz | 3 --- cryptsetup-1.7.4.tar.sign | 16 ++++++++++++++++ cryptsetup-1.7.4.tar.xz | 3 +++ cryptsetup.changes | 33 +++++++++++++++++++++++++++++++++ cryptsetup.spec | 25 ++++++++++++------------- 6 files changed, 64 insertions(+), 33 deletions(-) delete mode 100644 cryptsetup-1.7.2.tar.sign delete mode 100644 cryptsetup-1.7.2.tar.xz create mode 100644 cryptsetup-1.7.4.tar.sign create mode 100644 cryptsetup-1.7.4.tar.xz diff --git a/cryptsetup-1.7.2.tar.sign b/cryptsetup-1.7.2.tar.sign deleted file mode 100644 index 7ffce41..0000000 --- a/cryptsetup-1.7.2.tar.sign +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1 - -iQIcBAABCAAGBQJXUsbKAAoJENmwV3vZPpj8bV4QAI7QyOCNpP+++FLHK+RbX4aM -bYMxB589BwPIykUypK8ocaSuht0fPBSOV1+oUnrskRxGvSxAB1XG+TJowWHmsAzq -ZcIYZeIX1r6RdMQIUWIdQfIGLj7MNF6LgS26aFT7ceC64/J8DqQIqEmOzoUlgo22 -Rd/Ii58jOvzbhrj1P8odjdQqu4yYa3t81M9QwzXLFymWB5h769+JaxYtxsRQ1GIH -dcVo5WCv8ECz8yaXFfWNzgNYsNTL9EhPy3dC4nccQy5rjVzoS4BslENzorWCpaVP -j0qSthWDDRcoxzJMEABTTwy5o10LVIMqEuW90370RhA8yfSreX7O7rWShKFszQwy -mXQmt3glS5xk6KRFRwVMCN+31eBzC4kAsIjpWymb6C/ictog6bDB4MovGtUvjF/M -DGAuywnp7wQzE6c6KulVmeyEOWVn/eqSApXE64koKATQ9zVUd/QV8tVL2vwYdyuz -CHIT+OFlvattv6CGU9e3k8g/5YKUo4dWHveQgLeRiSviT60gbRdV/5i3LnxFvHjr -HTGTWOH0U/CjJ5EQxepbS8v18AM3vcCCdjyHrs5JXpIIr6h4I1KQZzjTaP/BPG3+ -nTfEOxxv0cfT6L7zNG+BTDHKEQEgnL1K4JXXEKBWty5XpaVRQlJLlQYqB4rCkOK0 -0VS3WWmzmFExX+iL7Jo1 -=GYgV ------END PGP SIGNATURE----- diff --git a/cryptsetup-1.7.2.tar.xz b/cryptsetup-1.7.2.tar.xz deleted file mode 100644 index 96c301f..0000000 --- a/cryptsetup-1.7.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dbb35dbf5f0c1749168c86c913fe98e872247bfc8425314b494c2423e7e43342 -size 1222688 diff --git a/cryptsetup-1.7.4.tar.sign b/cryptsetup-1.7.4.tar.sign new file mode 100644 index 0000000..7dfcec9 --- /dev/null +++ b/cryptsetup-1.7.4.tar.sign @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAljJDlYACgkQ2bBXe9k+ +mPyYrw//Y6siSxgAilu0UelfWqgj/8MqbVLFLdjeUE8R0CsoUnYBUJv8Ik2OERyp +hjqa8vkwkwpRGOGjggRkrk2uVtsovIShpWW5Kv9HzRD04CMj3ixxVtDIX/1AwdC3 +BuJJuwTJxnKPVncXcxsP94VCBqpzhgAVMDV7HX2kh/HuVWp0X79vjctPliwijhrz +WDfvI6ntE1QFPGfU6zQb+QmTQtrjAkQXVVwpoHDerXUVhu9BxfNbscpB45cN0PbT +n5HGTFJFXs1uU0QlCejeVAXlZAJIQkhA+QcTcqC2MHSZ6DsGx/ozCiNMRjmDoALf +zne6jhRjuN1DEijNVDu85n6uRk4vi3HDNwxOoMvEb2IdEWwMRpcVmrNWyAwH6oOx +nrzyLyEuQv0u/XWTwlzx56XncfAGOhh6bFldU4aS/w56z3Coh/fSrZnDk991ZMEF +7COirZ7tUV9ON/2epgNx7RYfDcXhTWbGQ6/Cuogj5zWv9quGn+n/GnvuEUDLfLHs +o5CLAzNo5+a8XwOGxkFZO6cnFzadtwBcSEwmRVzvjkpJWIMQLcq2+GtaFxCFOiK+ +NQOKmhuXJ40n+BOx/NMcsGY4tq+WshJUeD3mDPlUEB7gldGFNCSm01btPqaZZ8bI +nXr/CV8pnx9QJUL6C2ou5jUZyCvUXvyKTwMgDIV1qba13kgxrbk= +=ablJ +-----END PGP SIGNATURE----- diff --git a/cryptsetup-1.7.4.tar.xz b/cryptsetup-1.7.4.tar.xz new file mode 100644 index 0000000..a0cb774 --- /dev/null +++ b/cryptsetup-1.7.4.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7ccf893ef79a38fb92d61f03c17b964982119f5319cdaa85a1335b8558cca016 +size 1232068 diff --git a/cryptsetup.changes b/cryptsetup.changes index b43bb3d..7576162 100644 --- a/cryptsetup.changes +++ b/cryptsetup.changes @@ -1,3 +1,36 @@ +------------------------------------------------------------------- +Fri Mar 17 19:24:14 UTC 2017 - mpluskal@suse.com + +- Update to version 1.7.4: + * Allow to specify LUKS1 hash algorithm in Python luksFormat + wrapper. + * Use LUKS1 compiled-in defaults also in Python wrapper. + * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward + compatible API. + * OpenSSL backend: Fix LibreSSL compatibility. + * Check for data device and hash device area overlap in + veritysetup. + * Fix a possible race while allocating a free loop device. + * Fix possible file descriptor leaks if libcryptsetup is run from + a forked process. + * Fix missing same_cpu_crypt flag in status command. + * Various updates to FAQ and man pages. +- Changes for version 1.7.3: + * Fix device access to hash offsets located beyond the 2GB device + boundary in veritysetup. + * Set configured (compile-time) default iteration time for + devices created directly through libcryptsetup + * Fix PBKDF2 benchmark to not double iteration count for specific + corner case. + * Verify passphrase in cryptsetup-reencrypt when encrypting a new + drive. + * OpenSSL backend: fix memory leak if hash context was repeatedly + reused. + * OpenSSL backend: add support for OpenSSL 1.1.0. + * Fix several minor spelling errors. + * Properly check maximal buffer size when parsing UUID from + /dev/disk/. + ------------------------------------------------------------------- Thu Aug 25 15:15:15 UTC 2016 - alexander_naumov@opensuse.org diff --git a/cryptsetup.spec b/cryptsetup.spec index af98804..bca6655 100644 --- a/cryptsetup.spec +++ b/cryptsetup.spec @@ -1,7 +1,7 @@ # # spec file for package cryptsetup # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define so_ver 4 Name: cryptsetup -Version: 1.7.2 +Version: 1.7.4 Release: 0 Summary: Set Up dm-crypt Based Encrypted Block Devices License: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+ @@ -43,7 +43,6 @@ BuildRequires: popt-devel BuildRequires: suse-module-tools Requires(post): coreutils Requires(postun): coreutils -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description cryptsetup is used to conveniently set up dm-crypt based device-mapper @@ -91,11 +90,12 @@ time via the config file %{_sysconfdir}/crypttab. %setup -q %build -%configure --enable-cryptsetup-reencrypt \ - --enable-selinux \ - --enable-fips \ - --enable-pwquality \ - --enable-gcrypt-pbkdf2 +%configure \ + --enable-cryptsetup-reencrypt \ + --enable-selinux \ + --enable-fips \ + --enable-pwquality \ + --enable-gcrypt-pbkdf2 make %{?_smp_mflags} V=1 %install @@ -107,7 +107,7 @@ make %{?_smp_mflags} V=1 fipshmac %{buildroot}/%{_libdir}/libcryptsetup.so.* \ %{nil} -make DESTDIR=%{buildroot} install %{?_smp_mflags} +%make_install install -dm 0755 %{buildroot}/sbin ln -s ..%{_sbindir}/cryptsetup %{buildroot}/sbin # don't want this file in /lib (FHS compat check), and can't move it to /usr/lib @@ -144,7 +144,6 @@ fi %{?regenerate_initrd_posttrans} %post -n libcryptsetup%{so_ver} -p /sbin/ldconfig - %postun -n libcryptsetup%{so_ver} -p /sbin/ldconfig %files -f %{name}.lang @@ -156,9 +155,9 @@ fi %{_sbindir}/cryptsetup %{_sbindir}/veritysetup %{_sbindir}/cryptsetup-reencrypt -%{_mandir}/man8/cryptsetup.8.gz -%{_mandir}/man8/cryptsetup-reencrypt.8.gz -%{_mandir}/man8/veritysetup.8.gz +%{_mandir}/man8/cryptsetup.8%{ext_man} +%{_mandir}/man8/cryptsetup-reencrypt.8%{ext_man} +%{_mandir}/man8/veritysetup.8%{ext_man} %files -n libcryptsetup%{so_ver} %defattr(-,root,root)