Accepting request 1190588 from security

OBS-URL: https://build.opensuse.org/request/show/1190588
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/cryptsetup?expand=0&rev=128

cryptsetup-2.7.2.tar.sign

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmYVE/0ACgkQ2bBXe9k+
-mPwmmA//TMJkvg4UCte56B9RaCjFgCoD1fJh6NZDlgYWP+J4NFRSgNGSAFVFm59X
-JmStGU/UXCe8VqtRXemOu7ngAT9gNKVLtgB3maH2DVbdw5Kn1nFQMDdXON/w62JT
-3N7Z+MRvDNEzMTkD+cGw0wd81f1xTdZwKtV5v28WLGyR4rw27PNRhCmjOv2b4fqO
-Ytjdi0ydmJwm+xaQ2L1CpF8uDuTZdLqnCZK0tLnWyy8oLvtt2bJMUpjFY6eU6I5w
-Gg9oPDoF0XrlXA1q4poMryZloMsYYqjbXlBp2MaNOnuLOFsvU3j0u4Dy+Q/fxuUa
-qeljZdz7Aw0pB2dLopLj9wELHgRhlJTAV3mHtKYeu6yX2xafffMCzc0hRAaFNjHu
-5D+lGVD7k1CEYNxVR7skuwG5QPiRE9HvIdtdbivxZvdVfurrTPOIUJgy/nhvuDQx
-GZ6Hsdj4zOnTvxvFFpMHYv7Xq5XrG4nmWE2d4f1dcA0KJunnNVwDbDfCIms+nAkK
-bMF+T6JJZckoD//ZC2AA3mBcfVCq+CJVshI7xK8tBpTZ8b6RgyGhr/+ML5CmD/99
-RFLMlGW+iFpyhIWKh5hxD7VvWBtPZiyUDEBFP1sfxcylP8+NuR09+xM1zUsKAMiG
-XSr5q4m8KyTtAhXwbHNGZA3jGpTgeEW9wSxsRIwyin6/uFdkNgY=
-=Jadg
------END PGP SIGNATURE-----

cryptsetup-2.7.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:219ebf74e8eddf96624a0376477e5a6f8f350a67aaf36e7dadb114d94b3afef4
-size 11637316

cryptsetup-2.7.4.tar.sign

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmao2IIACgkQ2bBXe9k+
+mPyvyg/9HKVAfgZaUkdY5whMSrYBD4QIzxq0yZSKUObGQEkVpKLQOIknDwFsOor/
+U2E+bMmmvGw6zrJpPWebqHM2+WLxxSzfNhYXR2RIQ2BrtGEp61RvcVgqOgx5Ikz6
+m8RHVFxS7lT4UbYMI5xXokJL2ctiDW4LvsBKYIrP/wGbwde+W50dtnBZnb5p4Krc
+H4kSSRebQIhZTKnioGek+UNIA+gAG/bwqG17MaBJYDS2yVHsUk2BslrNUesFFj7W
+apuiy95yD00Dt1FES8MZL5eEnfcRe4qSo/4PSIrtE7rR3uBjrIX4mTJMtPpM4COB
+x8Uhr9rqANxcRxm21JopS7kS5S7quRUqdYWzgHhCwD9uXdhVzaRHc82Xyg5giUeb
+UkYVYQCXUWCG3rORT4Z6JYTiUMspdZywFPYR5lzhsNzazqnjMhymKBDvDRD07pGq
+LVEYUiQIx3WJgTdYZ0vhkRorooIe4D7i4rcBEUtqDTtMOZpROVE/9HE/noXCITlz
+/8Ve4k8xeTiUItQKNS79amc4u7kUOUAnvfojEUFCY6jsXBLCVDsJYTgs4mK7/PrF
+i1/XnLi7a5bkvK3dj0XN8zToG4Meq4A6yv+S1V2c+tBmxH51AbgtfZeiam976PiH
+O8JcSart3/xOfQ2UfvF2kNc7EbAUTKQpZjEr3u2UepMWM5HdFJk=
+=BZfz
+-----END PGP SIGNATURE-----

cryptsetup-2.7.4.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dce29903a58f7b774fe61191e7e6de955de0f40d9e27b0028ffcf3438c0e9480
+size 11695292

cryptsetup.changes

@@ -1,3 +1,45 @@
+-------------------------------------------------------------------
+Wed Jul 31 06:27:18 UTC 2024 - Martin Schreiner <martin.schreiner@suse.com>
+
+- Update to 2.7.4:
+  * Detect device busy failure for device-mapper table-referenced
+    devices.
+  * Fix shared activation for dm-verity devices.
+  * Add --shared option for veritysetup open action.
+  * Do not use exclusive flag for the allocated backing loop files.
+  * Fixes for problems found by static analyzers and Valgrind.
+  * Fixes to tests and CI scripts.
+- Use fdupes to link identical man pages.
+
+-------------------------------------------------------------------
+Tue Jul 30 08:51:00 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 2.7.3:
+  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
+    if the reported logical sector size for the block device and Opal
+    encryption logical block differs.
+  * Fixes to wiping LUKS2 headers after Opal locking area erase.
+  * Mention the need for possible PSID revert before Opal format for some
+    drives (man page).
+  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
+  * Fix interactive query retry if LUKS2 unbound keyslot is present.
+  * Detect unsupported zoned devices for LUKS header devices.
+  * Allow "capi" cipher format for benchmark command and fix parsing
+    of plain IV in "capi" format.
+  * Add support for HCTR2 encryption mode.
+  * Source code now uses SPDX license identifiers instead of full
+    license preambles.
+  * Fix missing includes for cryptographic backend that could cause
+    compilation errors for some systems.
+  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
+  * Fix various (mostly false positive) issues detected by Coverity.
+
+-------------------------------------------------------------------
+Fri Jul 12 11:53:46 UTC 2024 - Petr Vorel <pvorel@suse.cz>
+
+- License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with
+  'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception).
+
 -------------------------------------------------------------------
 Tue Apr  9 21:23:17 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
 

cryptsetup.spec

@@ -18,10 +18,10 @@
 
 %define so_ver 12
 Name:           cryptsetup
-Version:        2.7.2
+Version:        2.7.4
 Release:        0
 Summary:        Setup program for dm-crypt Based Encrypted Block Devices
-License:        CC-BY-SA-4.0 AND LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
+License:        CC-BY-SA-4.0 AND LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          System/Base
 URL:            https://gitlab.com/cryptsetup/cryptsetup/
 Source0:        https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-%{version}.tar.xz
@@ -33,6 +33,7 @@ Source3:        cryptsetup.keyring
 Source4:        https://creativecommons.org/licenses/by-sa/4.0/legalcode.txt#/cc-by-sa-4.0.txt
 # 2.6.38 has the required if_alg.h
 BuildRequires:  linux-glibc-devel >= 2.6.38
+BuildRequires:  fdupes
 BuildRequires:  pkgconfig
 BuildRequires:  suse-module-tools
 BuildRequires:  pkgconfig(blkid)
@@ -66,7 +67,7 @@ time via the config file %{_sysconfdir}/crypttab.
 
 %package ssh
 Summary:        Cryptsetup LUKS2 SSH token
-License:        LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
+License:        LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          System/Base
 
 %description ssh
@@ -75,7 +76,7 @@ token connected to an SSH server.
 
 %package doc
 Summary:        Cryptsetup Documentation
-License:        CC-BY-SA-4.0 AND LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
+License:        CC-BY-SA-4.0 AND LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          Documentation/Man
 Supplements:    (cryptsetup and man)
 Supplements:    (cryptsetup and patterns-base-documentation)
@@ -86,7 +87,7 @@ Documentation and man pages for cryptsetup
 
 %package -n libcryptsetup%{so_ver}
 Summary:        Library for setting up dm-crypt Based Encrypted Block Devices
-License:        LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
+License:        LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          System/Libraries
 Provides:       libcryptsetup%{so_ver}-hmac = %{version}
 Obsoletes:      libcryptsetup%{so_ver}-hmac < %{version}
@@ -101,7 +102,7 @@ time via the config file %{_sysconfdir}/crypttab.
 %package -n lib%{name}-devel
 Summary:        Header files for libcryptsetup
 # cryptsetup-devel last used 11.1
-License:        LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
+License:        LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          Development/Libraries/C and C++
 Requires:       glibc-devel
 Requires:       libcryptsetup%{so_ver} = %{version}
@@ -148,6 +149,8 @@ find %{buildroot} -type f -name "*.la" -delete -print
 
 %find_lang %{name} --all-name
 
+%fdupes -s %{buildroot}%{_mandir}/man8
+
 %check
 %make_build check