Accepting request 1288922 from security

OBS-URL: https://build.opensuse.org/request/show/1288922
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/cryptsetup?expand=0&rev=133

cc-by-sa-4.0.txt

@@ -1,428 +0,0 @@
-Attribution-ShareAlike 4.0 International
-
-=======================================================================
-
-Creative Commons Corporation ("Creative Commons") is not a law firm and
-does not provide legal services or legal advice. Distribution of
-Creative Commons public licenses does not create a lawyer-client or
-other relationship. Creative Commons makes its licenses and related
-information available on an "as-is" basis. Creative Commons gives no
-warranties regarding its licenses, any material licensed under their
-terms and conditions, or any related information. Creative Commons
-disclaims all liability for damages resulting from their use to the
-fullest extent possible.
-
-Using Creative Commons Public Licenses
-
-Creative Commons public licenses provide a standard set of terms and
-conditions that creators and other rights holders may use to share
-original works of authorship and other material subject to copyright
-and certain other rights specified in the public license below. The
-following considerations are for informational purposes only, are not
-exhaustive, and do not form part of our licenses.
-
-     Considerations for licensors: Our public licenses are
-     intended for use by those authorized to give the public
-     permission to use material in ways otherwise restricted by
-     copyright and certain other rights. Our licenses are
-     irrevocable. Licensors should read and understand the terms
-     and conditions of the license they choose before applying it.
-     Licensors should also secure all rights necessary before
-     applying our licenses so that the public can reuse the
-     material as expected. Licensors should clearly mark any
-     material not subject to the license. This includes other CC-
-     licensed material, or material used under an exception or
-     limitation to copyright. More considerations for licensors:
-    wiki.creativecommons.org/Considerations_for_licensors
-
-     Considerations for the public: By using one of our public
-     licenses, a licensor grants the public permission to use the
-     licensed material under specified terms and conditions. If
-     the licensor's permission is not necessary for any reason--for
-     example, because of any applicable exception or limitation to
-     copyright--then that use is not regulated by the license. Our
-     licenses grant only permissions under copyright and certain
-     other rights that a licensor has authority to grant. Use of
-     the licensed material may still be restricted for other
-     reasons, including because others have copyright or other
-     rights in the material. A licensor may make special requests,
-     such as asking that all changes be marked or described.
-     Although not required by our licenses, you are encouraged to
-     respect those requests where reasonable. More considerations
-     for the public:
-    wiki.creativecommons.org/Considerations_for_licensees
-
-=======================================================================
-
-Creative Commons Attribution-ShareAlike 4.0 International Public
-License
-
-By exercising the Licensed Rights (defined below), You accept and agree
-to be bound by the terms and conditions of this Creative Commons
-Attribution-ShareAlike 4.0 International Public License ("Public
-License"). To the extent this Public License may be interpreted as a
-contract, You are granted the Licensed Rights in consideration of Your
-acceptance of these terms and conditions, and the Licensor grants You
-such rights in consideration of benefits the Licensor receives from
-making the Licensed Material available under these terms and
-conditions.
-
-
-Section 1 -- Definitions.
-
-  a. Adapted Material means material subject to Copyright and Similar
-     Rights that is derived from or based upon the Licensed Material
-     and in which the Licensed Material is translated, altered,
-     arranged, transformed, or otherwise modified in a manner requiring
-     permission under the Copyright and Similar Rights held by the
-     Licensor. For purposes of this Public License, where the Licensed
-     Material is a musical work, performance, or sound recording,
-     Adapted Material is always produced where the Licensed Material is
-     synched in timed relation with a moving image.
-
-  b. Adapter's License means the license You apply to Your Copyright
-     and Similar Rights in Your contributions to Adapted Material in
-     accordance with the terms and conditions of this Public License.
-
-  c. BY-SA Compatible License means a license listed at
-     creativecommons.org/compatiblelicenses, approved by Creative
-     Commons as essentially the equivalent of this Public License.
-
-  d. Copyright and Similar Rights means copyright and/or similar rights
-     closely related to copyright including, without limitation,
-     performance, broadcast, sound recording, and Sui Generis Database
-     Rights, without regard to how the rights are labeled or
-     categorized. For purposes of this Public License, the rights
-     specified in Section 2(b)(1)-(2) are not Copyright and Similar
-     Rights.
-
-  e. Effective Technological Measures means those measures that, in the
-     absence of proper authority, may not be circumvented under laws
-     fulfilling obligations under Article 11 of the WIPO Copyright
-     Treaty adopted on December 20, 1996, and/or similar international
-     agreements.
-
-  f. Exceptions and Limitations means fair use, fair dealing, and/or
-     any other exception or limitation to Copyright and Similar Rights
-     that applies to Your use of the Licensed Material.
-
-  g. License Elements means the license attributes listed in the name
-     of a Creative Commons Public License. The License Elements of this
-     Public License are Attribution and ShareAlike.
-
-  h. Licensed Material means the artistic or literary work, database,
-     or other material to which the Licensor applied this Public
-     License.
-
-  i. Licensed Rights means the rights granted to You subject to the
-     terms and conditions of this Public License, which are limited to
-     all Copyright and Similar Rights that apply to Your use of the
-     Licensed Material and that the Licensor has authority to license.
-
-  j. Licensor means the individual(s) or entity(ies) granting rights
-     under this Public License.
-
-  k. Share means to provide material to the public by any means or
-     process that requires permission under the Licensed Rights, such
-     as reproduction, public display, public performance, distribution,
-     dissemination, communication, or importation, and to make material
-     available to the public including in ways that members of the
-     public may access the material from a place and at a time
-     individually chosen by them.
-
-  l. Sui Generis Database Rights means rights other than copyright
-     resulting from Directive 96/9/EC of the European Parliament and of
-     the Council of 11 March 1996 on the legal protection of databases,
-     as amended and/or succeeded, as well as other essentially
-     equivalent rights anywhere in the world.
-
-  m. You means the individual or entity exercising the Licensed Rights
-     under this Public License. Your has a corresponding meaning.
-
-
-Section 2 -- Scope.
-
-  a. License grant.
-
-       1. Subject to the terms and conditions of this Public License,
-          the Licensor hereby grants You a worldwide, royalty-free,
-          non-sublicensable, non-exclusive, irrevocable license to
-          exercise the Licensed Rights in the Licensed Material to:
-
-            a. reproduce and Share the Licensed Material, in whole or
-               in part; and
-
-            b. produce, reproduce, and Share Adapted Material.
-
-       2. Exceptions and Limitations. For the avoidance of doubt, where
-          Exceptions and Limitations apply to Your use, this Public
-          License does not apply, and You do not need to comply with
-          its terms and conditions.
-
-       3. Term. The term of this Public License is specified in Section
-          6(a).
-
-       4. Media and formats; technical modifications allowed. The
-          Licensor authorizes You to exercise the Licensed Rights in
-          all media and formats whether now known or hereafter created,
-          and to make technical modifications necessary to do so. The
-          Licensor waives and/or agrees not to assert any right or
-          authority to forbid You from making technical modifications
-          necessary to exercise the Licensed Rights, including
-          technical modifications necessary to circumvent Effective
-          Technological Measures. For purposes of this Public License,
-          simply making modifications authorized by this Section 2(a)
-          (4) never produces Adapted Material.
-
-       5. Downstream recipients.
-
-            a. Offer from the Licensor -- Licensed Material. Every
-               recipient of the Licensed Material automatically
-               receives an offer from the Licensor to exercise the
-               Licensed Rights under the terms and conditions of this
-               Public License.
-
-            b. Additional offer from the Licensor -- Adapted Material.
-               Every recipient of Adapted Material from You
-               automatically receives an offer from the Licensor to
-               exercise the Licensed Rights in the Adapted Material
-               under the conditions of the Adapter's License You apply.
-
-            c. No downstream restrictions. You may not offer or impose
-               any additional or different terms or conditions on, or
-               apply any Effective Technological Measures to, the
-               Licensed Material if doing so restricts exercise of the
-               Licensed Rights by any recipient of the Licensed
-               Material.
-
-       6. No endorsement. Nothing in this Public License constitutes or
-          may be construed as permission to assert or imply that You
-          are, or that Your use of the Licensed Material is, connected
-          with, or sponsored, endorsed, or granted official status by,
-          the Licensor or others designated to receive attribution as
-          provided in Section 3(a)(1)(A)(i).
-
-  b. Other rights.
-
-       1. Moral rights, such as the right of integrity, are not
-          licensed under this Public License, nor are publicity,
-          privacy, and/or other similar personality rights; however, to
-          the extent possible, the Licensor waives and/or agrees not to
-          assert any such rights held by the Licensor to the limited
-          extent necessary to allow You to exercise the Licensed
-          Rights, but not otherwise.
-
-       2. Patent and trademark rights are not licensed under this
-          Public License.
-
-       3. To the extent possible, the Licensor waives any right to
-          collect royalties from You for the exercise of the Licensed
-          Rights, whether directly or through a collecting society
-          under any voluntary or waivable statutory or compulsory
-          licensing scheme. In all other cases the Licensor expressly
-          reserves any right to collect such royalties.
-
-
-Section 3 -- License Conditions.
-
-Your exercise of the Licensed Rights is expressly made subject to the
-following conditions.
-
-  a. Attribution.
-
-       1. If You Share the Licensed Material (including in modified
-          form), You must:
-
-            a. retain the following if it is supplied by the Licensor
-               with the Licensed Material:
-
-                 i. identification of the creator(s) of the Licensed
-                    Material and any others designated to receive
-                    attribution, in any reasonable manner requested by
-                    the Licensor (including by pseudonym if
-                    designated);
-
-                ii. a copyright notice;
-
-               iii. a notice that refers to this Public License;
-
-                iv. a notice that refers to the disclaimer of
-                    warranties;
-
-                 v. a URI or hyperlink to the Licensed Material to the
-                    extent reasonably practicable;
-
-            b. indicate if You modified the Licensed Material and
-               retain an indication of any previous modifications; and
-
-            c. indicate the Licensed Material is licensed under this
-               Public License, and include the text of, or the URI or
-               hyperlink to, this Public License.
-
-       2. You may satisfy the conditions in Section 3(a)(1) in any
-          reasonable manner based on the medium, means, and context in
-          which You Share the Licensed Material. For example, it may be
-          reasonable to satisfy the conditions by providing a URI or
-          hyperlink to a resource that includes the required
-          information.
-
-       3. If requested by the Licensor, You must remove any of the
-          information required by Section 3(a)(1)(A) to the extent
-          reasonably practicable.
-
-  b. ShareAlike.
-
-     In addition to the conditions in Section 3(a), if You Share
-     Adapted Material You produce, the following conditions also apply.
-
-       1. The Adapter's License You apply must be a Creative Commons
-          license with the same License Elements, this version or
-          later, or a BY-SA Compatible License.
-
-       2. You must include the text of, or the URI or hyperlink to, the
-          Adapter's License You apply. You may satisfy this condition
-          in any reasonable manner based on the medium, means, and
-          context in which You Share Adapted Material.
-
-       3. You may not offer or impose any additional or different terms
-          or conditions on, or apply any Effective Technological
-          Measures to, Adapted Material that restrict exercise of the
-          rights granted under the Adapter's License You apply.
-
-
-Section 4 -- Sui Generis Database Rights.
-
-Where the Licensed Rights include Sui Generis Database Rights that
-apply to Your use of the Licensed Material:
-
-  a. for the avoidance of doubt, Section 2(a)(1) grants You the right
-     to extract, reuse, reproduce, and Share all or a substantial
-     portion of the contents of the database;
-
-  b. if You include all or a substantial portion of the database
-     contents in a database in which You have Sui Generis Database
-     Rights, then the database in which You have Sui Generis Database
-     Rights (but not its individual contents) is Adapted Material,
-     including for purposes of Section 3(b); and
-
-  c. You must comply with the conditions in Section 3(a) if You Share
-     all or a substantial portion of the contents of the database.
-
-For the avoidance of doubt, this Section 4 supplements and does not
-replace Your obligations under this Public License where the Licensed
-Rights include other Copyright and Similar Rights.
-
-
-Section 5 -- Disclaimer of Warranties and Limitation of Liability.
-
-  a. UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE
-     EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS
-     AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF
-     ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS,
-     IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION,
-     WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR
-     PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS,
-     ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT
-     KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT
-     ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU.
-
-  b. TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE
-     TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION,
-     NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT,
-     INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES,
-     COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR
-     USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN
-     ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR
-     DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR
-     IN PART, THIS LIMITATION MAY NOT APPLY TO YOU.
-
-  c. The disclaimer of warranties and limitation of liability provided
-     above shall be interpreted in a manner that, to the extent
-     possible, most closely approximates an absolute disclaimer and
-     waiver of all liability.
-
-
-Section 6 -- Term and Termination.
-
-  a. This Public License applies for the term of the Copyright and
-     Similar Rights licensed here. However, if You fail to comply with
-     this Public License, then Your rights under this Public License
-     terminate automatically.
-
-  b. Where Your right to use the Licensed Material has terminated under
-     Section 6(a), it reinstates:
-
-       1. automatically as of the date the violation is cured, provided
-          it is cured within 30 days of Your discovery of the
-          violation; or
-
-       2. upon express reinstatement by the Licensor.
-
-     For the avoidance of doubt, this Section 6(b) does not affect any
-     right the Licensor may have to seek remedies for Your violations
-     of this Public License.
-
-  c. For the avoidance of doubt, the Licensor may also offer the
-     Licensed Material under separate terms or conditions or stop
-     distributing the Licensed Material at any time; however, doing so
-     will not terminate this Public License.
-
-  d. Sections 1, 5, 6, 7, and 8 survive termination of this Public
-     License.
-
-
-Section 7 -- Other Terms and Conditions.
-
-  a. The Licensor shall not be bound by any additional or different
-     terms or conditions communicated by You unless expressly agreed.
-
-  b. Any arrangements, understandings, or agreements regarding the
-     Licensed Material not stated herein are separate from and
-     independent of the terms and conditions of this Public License.
-
-
-Section 8 -- Interpretation.
-
-  a. For the avoidance of doubt, this Public License does not, and
-     shall not be interpreted to, reduce, limit, restrict, or impose
-     conditions on any use of the Licensed Material that could lawfully
-     be made without permission under this Public License.
-
-  b. To the extent possible, if any provision of this Public License is
-     deemed unenforceable, it shall be automatically reformed to the
-     minimum extent necessary to make it enforceable. If the provision
-     cannot be reformed, it shall be severed from this Public License
-     without affecting the enforceability of the remaining terms and
-     conditions.
-
-  c. No term or condition of this Public License will be waived and no
-     failure to comply consented to unless expressly agreed to by the
-     Licensor.
-
-  d. Nothing in this Public License constitutes or may be interpreted
-     as a limitation upon, or waiver of, any privileges and immunities
-     that apply to the Licensor or You, including from the legal
-     processes of any jurisdiction or authority.
-
-
-=======================================================================
-
-Creative Commons is not a party to its public
-licenses. Notwithstanding, Creative Commons may elect to apply one of
-its public licenses to material it publishes and in those instances
-will be considered the “Licensor.” The text of the Creative Commons
-public licenses is dedicated to the public domain under the CC0 Public
-Domain Dedication. Except for the limited purpose of indicating that
-material is shared under a Creative Commons public license or as
-otherwise permitted by the Creative Commons policies published at
-creativecommons.org/policies, Creative Commons does not authorize the
-use of the trademark "Creative Commons" or any other trademark or logo
-of Creative Commons without its prior written consent including,
-without limitation, in connection with any unauthorized modifications
-to any of its public licenses or any other arrangements,
-understandings, or agreements concerning use of licensed material. For
-the avoidance of doubt, this paragraph does not form part of the
-public licenses.
-
-Creative Commons may be contacted at creativecommons.org.
-

cryptsetup-2.7.4.tar.sign

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmao2IIACgkQ2bBXe9k+
-mPyvyg/9HKVAfgZaUkdY5whMSrYBD4QIzxq0yZSKUObGQEkVpKLQOIknDwFsOor/
-U2E+bMmmvGw6zrJpPWebqHM2+WLxxSzfNhYXR2RIQ2BrtGEp61RvcVgqOgx5Ikz6
-m8RHVFxS7lT4UbYMI5xXokJL2ctiDW4LvsBKYIrP/wGbwde+W50dtnBZnb5p4Krc
-H4kSSRebQIhZTKnioGek+UNIA+gAG/bwqG17MaBJYDS2yVHsUk2BslrNUesFFj7W
-apuiy95yD00Dt1FES8MZL5eEnfcRe4qSo/4PSIrtE7rR3uBjrIX4mTJMtPpM4COB
-x8Uhr9rqANxcRxm21JopS7kS5S7quRUqdYWzgHhCwD9uXdhVzaRHc82Xyg5giUeb
-UkYVYQCXUWCG3rORT4Z6JYTiUMspdZywFPYR5lzhsNzazqnjMhymKBDvDRD07pGq
-LVEYUiQIx3WJgTdYZ0vhkRorooIe4D7i4rcBEUtqDTtMOZpROVE/9HE/noXCITlz
-/8Ve4k8xeTiUItQKNS79amc4u7kUOUAnvfojEUFCY6jsXBLCVDsJYTgs4mK7/PrF
-i1/XnLi7a5bkvK3dj0XN8zToG4Meq4A6yv+S1V2c+tBmxH51AbgtfZeiam976PiH
-O8JcSart3/xOfQ2UfvF2kNc7EbAUTKQpZjEr3u2UepMWM5HdFJk=
-=BZfz
------END PGP SIGNATURE-----

cryptsetup-2.7.4.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dce29903a58f7b774fe61191e7e6de955de0f40d9e27b0028ffcf3438c0e9480
-size 11695292

cryptsetup-2.8.0.tar.sign

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=U/wu
+-----END PGP SIGNATURE-----

cryptsetup-2.8.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cc9e2d37c25a871cea37520b28d532207b0c1670fb10fc54d68071f63f5243a2
+size 11794404

cryptsetup-fips140-3.patch

@@ -0,0 +1,22 @@
+Index: cryptsetup-2.7.0/lib/utils_benchmark.c
+===================================================================
+--- cryptsetup-2.7.0.orig/lib/utils_benchmark.c
++++ cryptsetup-2.7.0/lib/utils_benchmark.c
+@@ -196,7 +196,7 @@ int crypt_benchmark_pbkdf_internal(struc
+ 		pbkdf->parallel_threads = 0; /* N/A in PBKDF2 */
+ 		pbkdf->max_memory_kb = 0; /* N/A in PBKDF2 */
+ 
+-		r = crypt_benchmark_pbkdf(cd, pbkdf, "foobarfo", 8, "01234567890abcdef", 16,
++		r = crypt_benchmark_pbkdf(cd, pbkdf, "foobarfofoobarfofoobarfo", 24, "01234567890abcdef", 16,
+ 					volume_key_size, &benchmark_callback, &u);
+ 		pbkdf->time_ms = ms_tmp;
+ 		if (r < 0) {
+@@ -216,7 +216,7 @@ int crypt_benchmark_pbkdf_internal(struc
+ 			return 0;
+ 		}
+ 
+-		r = crypt_benchmark_pbkdf(cd, pbkdf, "foobarfo", 8,
++		r = crypt_benchmark_pbkdf(cd, pbkdf, "foobarfofoobarfofoobarfo", 24,
+ 			"0123456789abcdef0123456789abcdef", 32,
+ 			volume_key_size, &benchmark_callback, &u);
+ 		if (r < 0)

cryptsetup.changes

@@ -1,3 +1,118 @@
+-------------------------------------------------------------------
+Thu Jun 26 07:58:52 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 2.8.0:
+  * Full release notes in:
+    - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
+  * Introduce support for inline mode (use HW sectors with additional hardware
+    metadata space).
+  * Finalize use of keyslot context API.
+  * Make all keyslot context types fully self-contained.
+  * Add --key-description and --new-key-description cryptsetup options.
+  * Support more precise keyslot selection in reencryption initialization.
+  * Allow reencryption to resume using token and volume keys.
+  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
+  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
+  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
+  * Opal2: Fix some error description (in debug only).
+  * Opal2: Do not allow deferred deactivation.
+  * Allow --reduce-device-size and --device-size combination for reencryption
+    (encrypt) action.
+  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
+  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
+  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
+    keyslot encryption.
+  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
+  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
+  * Remove keyslot warning about possible failure due to low memory.
+  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
+  * Properly report out of memory error for cryptographic backends implementing Argon2.
+  * Avoid KDF2 memory cost overflow on 32-bit platforms.
+  * Do not use page size as a fallback for device block size.
+  * veritysetup: Check hash device size in advance.
+  * Print a better error message for unsupported LUKS2 AEAD device resize.
+  * Optimize LUKS2 metadata writes.
+  * veritysetup: support --error-as-corruption option.
+  * Report all sizes in status and dump command output in the correct units.
+  * Add --integrity-key-size option to cryptsetup.
+  * Support trusted & encrypted keyrings for plain devices.
+  * Support plain format resize with a keyring key.
+  * TCRYPT: Clear mapping of system-encrypted partitions.
+  * TCRYPT: Print all information from the decrypted metadata header in
+    the tcryptDump command.
+  * Always lock the volume key structure in memory.
+  * Do not run direct-io read check on block devices.
+  * Fix a possible segfault in deferred deactivation.
+  * Exclude cipher allocation time from the cryptsetup benchmark.
+  * Add Mbed-TLS optional crypto backend.
+  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
+  * Reorganize license files. The license text files are now in docs/licenses.
+    The COPYING file in the root directory is the default license.
+  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
+    and named as COPYING.CC-BY-SA-4.0.
+  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
+    with all existing symbols. Due to the self-contained memory allocation,
+    these symbols have the new version:
+    - crypt_keyslot_context_init_by_passphrase;
+    - crypt_keyslot_context_init_by_keyfile;
+    - crypt_keyslot_context_init_by_token;
+    - crypt_keyslot_context_init_by_volume_key;
+    - crypt_keyslot_context_init_by_signed_key;
+    - crypt_keyslot_context_init_by_keyring;
+    - crypt_keyslot_context_init_by_vk_in_keyring;
+  * New symbols:
+    - crypt_format_inline
+    - crypt_get_old_volume_key_size
+    - crypt_reencrypt_init_by_keyslot_context
+    - crypt_safe_memcpy
+  * New defines:
+    - CRYPT_ACTIVATE_HIGH_PRIORITY
+    - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
+    - CRYPT_ACTIVATE_INLINE_MODE
+    - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
+  * New requirement flag:
+    - CRYPT_REQUIREMENT_INLINE_HW_TAGS
+
+-------------------------------------------------------------------
+Thu May 29 09:55:08 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Add a dependency on device-mapper to libcryptsetup12 to install
+  the required device-mapper udev rules. [bsc#1241612]
+
+-------------------------------------------------------------------
+Fri Mar 14 10:06:24 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
+  [bsc#1236375, bsc#1236164]
+  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
+    but its not FIPS compliant. A system would be unbootable if using
+    Argon2id or Argon2i for disk encryption and then switching to
+    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
+  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
+  * Remove the dependency on libargon2 as is now provided by openssl.
+
+-------------------------------------------------------------------
+Fri Sep 13 07:36:26 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 2.7.5:
+  * Fix possible online reencryption data corruption (only in 2.7.x).
+    In some situations (initializing a suspended device-mapper device),
+    cryptsetup disabled direct-io device access. This caused unsafe
+    online reencryption operations that could lead to data corruption.
+    The code now adds strict checks (and aborts the operation) and
+    changes direct-io detection code to prevent data corruption.
+  * Fix a clang compilation error in SSH token plugin.
+    As clang linker treats missing symbols as errors, the linker phase
+    for the SSH token failed as the optional cryptsetup_token_buffer_free
+    was not defined.
+  * Fix crypto backend initialization in crypt_format_luks2_opal API call.
+
+-------------------------------------------------------------------
+Fri Aug 30 15:07:28 UTC 2024 - Marcus Meissner <meissner@suse.com>
+
+- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
+  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)
+
 -------------------------------------------------------------------
 Wed Jul 31 06:27:18 UTC 2024 - Martin Schreiner <martin.schreiner@suse.com>
 

cryptsetup.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package cryptsetup
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,19 +18,18 @@
 
 %define so_ver 12
 Name:           cryptsetup
-Version:        2.7.4
+Version:        2.8.0
 Release:        0
 Summary:        Setup program for dm-crypt Based Encrypted Block Devices
 License:        CC-BY-SA-4.0 AND LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          System/Base
 URL:            https://gitlab.com/cryptsetup/cryptsetup/
-Source0:        https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-%{version}.tar.xz
+Source0:        https://www.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-%{version}.tar.xz
 # GPG signature of the uncompressed tarball.
-Source1:        https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-%{version}.tar.sign
+Source1:        https://www.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-%{version}.tar.sign
 Source2:        baselibs.conf
 Source3:        cryptsetup.keyring
-# FAQ.md is CC-BY-SA-4.0
+Patch0:         cryptsetup-fips140-3.patch
-Source4:        https://creativecommons.org/licenses/by-sa/4.0/legalcode.txt#/cc-by-sa-4.0.txt
 # 2.6.38 has the required if_alg.h
 BuildRequires:  linux-glibc-devel >= 2.6.38
 BuildRequires:  fdupes
@@ -39,7 +38,6 @@ BuildRequires:  suse-module-tools
 BuildRequires:  pkgconfig(blkid)
 BuildRequires:  pkgconfig(devmapper)
 BuildRequires:  pkgconfig(json-c)
-BuildRequires:  pkgconfig(libargon2)
 BuildRequires:  pkgconfig(libselinux)
 BuildRequires:  pkgconfig(libssh)
 BuildRequires:  pkgconfig(openssl)
@@ -89,6 +87,7 @@ Documentation and man pages for cryptsetup
 Summary:        Library for setting up dm-crypt Based Encrypted Block Devices
 License:        LGPL-2.0-or-later WITH cryptsetup-OpenSSL-exception
 Group:          System/Libraries
+Requires:       device-mapper
 Provides:       libcryptsetup%{so_ver}-hmac = %{version}
 Obsoletes:      libcryptsetup%{so_ver}-hmac < %{version}
 
@@ -118,7 +117,6 @@ time via the config file %{_sysconfdir}/crypttab.
 
 %prep
 %autosetup -p1
-cp -v %{SOURCE4} .
 
 %build
 # force regeneration of manual pages from AsciiDoc
@@ -130,6 +128,7 @@ rm -f man/*.8
   --enable-pwquality \
   --enable-gcrypt-pbkdf2 \
   --enable-libargon2 \
+  --with-luks2-pbkdf=pbkdf2 \
 %if %{?suse_version} < 1550
   --with-default-luks-format=LUKS1 \
 %endif
@@ -167,7 +166,7 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %ldconfig_scriptlets -n libcryptsetup%{so_ver}
 
 %files
-%license COPYING*
+%license docs/licenses/COPYING*
 %if 0%{?suse_version} < 1550
 /sbin/cryptsetup
 %endif
@@ -178,29 +177,28 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %ghost %attr(700, -, -) %dir /run/cryptsetup
 
 %files lang -f %{name}.lang
-%license COPYING*
+%license docs/licenses/COPYING*
 
 %files -n libcryptsetup%{so_ver}
-%license COPYING*
+%license docs/licenses/COPYING*
 %{_libdir}/libcryptsetup.so.%{so_ver}*
 
 %files -n lib%{name}-devel
-%license COPYING*
+%license docs/licenses/COPYING*
 %doc docs/examples/
 %{_includedir}/libcryptsetup.h
 %{_libdir}/libcryptsetup.so
 %{_libdir}/pkgconfig/*
 
 %files ssh
-%license COPYING*
+%license docs/licenses/COPYING*
 %dir %{_libdir}/%{name}
 %{_libdir}/%{name}/libcryptsetup-token-ssh.so
 %{_mandir}/man8/cryptsetup-ssh.8%{?ext_man}
 %{_sbindir}/cryptsetup-ssh
 
 %files doc
-%license COPYING*
+%license docs/licenses/COPYING*
-%license cc-by-sa-4.0.txt
 %doc AUTHORS FAQ.md README.md docs/*ReleaseNotes docs/on-disk-format*.pdf
 %{_mandir}/man8/cryptsetup.8%{?ext_man}
 %{_mandir}/man8/cryptsetup-benchmark.8%{?ext_man}