Accepting request 481749 from security

1

OBS-URL: https://build.opensuse.org/request/show/481749
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/cryptsetup?expand=0&rev=98

cryptsetup-1.7.2.tar.sign

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQIcBAABCAAGBQJXUsbKAAoJENmwV3vZPpj8bV4QAI7QyOCNpP+++FLHK+RbX4aM
-bYMxB589BwPIykUypK8ocaSuht0fPBSOV1+oUnrskRxGvSxAB1XG+TJowWHmsAzq
-ZcIYZeIX1r6RdMQIUWIdQfIGLj7MNF6LgS26aFT7ceC64/J8DqQIqEmOzoUlgo22
-Rd/Ii58jOvzbhrj1P8odjdQqu4yYa3t81M9QwzXLFymWB5h769+JaxYtxsRQ1GIH
-dcVo5WCv8ECz8yaXFfWNzgNYsNTL9EhPy3dC4nccQy5rjVzoS4BslENzorWCpaVP
-j0qSthWDDRcoxzJMEABTTwy5o10LVIMqEuW90370RhA8yfSreX7O7rWShKFszQwy
-mXQmt3glS5xk6KRFRwVMCN+31eBzC4kAsIjpWymb6C/ictog6bDB4MovGtUvjF/M
-DGAuywnp7wQzE6c6KulVmeyEOWVn/eqSApXE64koKATQ9zVUd/QV8tVL2vwYdyuz
-CHIT+OFlvattv6CGU9e3k8g/5YKUo4dWHveQgLeRiSviT60gbRdV/5i3LnxFvHjr
-HTGTWOH0U/CjJ5EQxepbS8v18AM3vcCCdjyHrs5JXpIIr6h4I1KQZzjTaP/BPG3+
-nTfEOxxv0cfT6L7zNG+BTDHKEQEgnL1K4JXXEKBWty5XpaVRQlJLlQYqB4rCkOK0
-0VS3WWmzmFExX+iL7Jo1
-=GYgV
------END PGP SIGNATURE-----

cryptsetup-1.7.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dbb35dbf5f0c1749168c86c913fe98e872247bfc8425314b494c2423e7e43342
-size 1222688

cryptsetup-1.7.4.tar.sign

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=ablJ
+-----END PGP SIGNATURE-----

cryptsetup-1.7.4.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7ccf893ef79a38fb92d61f03c17b964982119f5319cdaa85a1335b8558cca016
+size 1232068

cryptsetup.changes

@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Fri Mar 17 19:24:14 UTC 2017 - mpluskal@suse.com
+
+- Update to version 1.7.4:
+  * Allow to specify LUKS1 hash algorithm in Python luksFormat
+    wrapper.
+  * Use LUKS1 compiled-in defaults also in Python wrapper.
+  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
+    compatible API.
+  * OpenSSL backend: Fix LibreSSL compatibility.
+  * Check for data device and hash device area overlap in
+    veritysetup.
+  * Fix a possible race while allocating a free loop device.
+  * Fix possible file descriptor leaks if libcryptsetup is run from
+    a forked process.
+  * Fix missing same_cpu_crypt flag in status command.
+  * Various updates to FAQ and man pages.
+- Changes for version 1.7.3:
+  * Fix device access to hash offsets located beyond the 2GB device
+    boundary in veritysetup.
+  * Set configured (compile-time) default iteration time for
+    devices created directly through libcryptsetup
+  * Fix PBKDF2 benchmark to not double iteration count for specific
+    corner case.
+  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
+    drive.
+  * OpenSSL backend: fix memory leak if hash context was repeatedly
+    reused.
+  * OpenSSL backend: add support for OpenSSL 1.1.0.
+  * Fix several minor spelling errors.
+  * Properly check maximal buffer size when parsing UUID from
+    /dev/disk/.
+
 -------------------------------------------------------------------
 Thu Aug 25 15:15:15 UTC 2016 - alexander_naumov@opensuse.org
 

cryptsetup.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package cryptsetup
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define so_ver 4
 Name:           cryptsetup
-Version:        1.7.2
+Version:        1.7.4
 Release:        0
 Summary:        Set Up dm-crypt Based Encrypted Block Devices
 License:        SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+
@@ -43,7 +43,6 @@ BuildRequires:  popt-devel
 BuildRequires:  suse-module-tools
 Requires(post): coreutils
 Requires(postun): coreutils
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
 cryptsetup is used to conveniently set up dm-crypt based device-mapper
@@ -91,7 +90,8 @@ time via the config file %{_sysconfdir}/crypttab.
 %setup -q
 
 %build
-%configure --enable-cryptsetup-reencrypt \
+%configure \
+  --enable-cryptsetup-reencrypt \
   --enable-selinux \
   --enable-fips \
   --enable-pwquality \
@@ -107,7 +107,7 @@ make %{?_smp_mflags} V=1
   fipshmac %{buildroot}/%{_libdir}/libcryptsetup.so.* \
 %{nil}
 
-make DESTDIR=%{buildroot} install %{?_smp_mflags}
+%make_install
 install -dm 0755 %{buildroot}/sbin
 ln -s ..%{_sbindir}/cryptsetup %{buildroot}/sbin
 # don't want this file in /lib (FHS compat check), and can't move it to /usr/lib
@@ -144,7 +144,6 @@ fi
 %{?regenerate_initrd_posttrans}
 
 %post -n libcryptsetup%{so_ver} -p /sbin/ldconfig
-
 %postun -n libcryptsetup%{so_ver} -p /sbin/ldconfig
 
 %files -f %{name}.lang
@@ -156,9 +155,9 @@ fi
 %{_sbindir}/cryptsetup
 %{_sbindir}/veritysetup
 %{_sbindir}/cryptsetup-reencrypt
-%{_mandir}/man8/cryptsetup.8.gz
-%{_mandir}/man8/cryptsetup-reencrypt.8.gz
-%{_mandir}/man8/veritysetup.8.gz
+%{_mandir}/man8/cryptsetup.8%{ext_man}
+%{_mandir}/man8/cryptsetup-reencrypt.8%{ext_man}
+%{_mandir}/man8/veritysetup.8%{ext_man}
 
 %files -n libcryptsetup%{so_ver}
 %defattr(-,root,root)