[dm-crypt] [ANNOUNCE] cryptsetup 2.4.2

[dm-crypt] [ANNOUNCE] cryptsetup 2.4.2

[Milan Broz]

[-- Attachment #1.1.1: Type: text/plain, Size: 1697 bytes --]

The cryptsetup 2.4.2 stable release is available at

      https://gitlab.com/cryptsetup/cryptsetup

Please note that release packages are located on kernel.org

      https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/

Feedback and bug reports are welcomed.

Cryptsetup 2.4.2 Release Notes
==============================
Stable bug-fix release.

All users of cryptsetup 2.4.1 should upgrade to this version.

Changes since version 2.4.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Fix possible large memory allocation if LUKS2 header size is invalid.
   LUKS2 code read the full header to buffer to verify the checksum.
   The maximal supported header size now limits the memory allocation.

* Fix memory corruption in debug message printing LUKS2 checksum.

* veritysetup: remove link to the UUID library for the static build.

* Remove link to pwquality library for integritysetup and veritysetup.
   These tools do not read passphrases.

* OpenSSL3 backend: avoid remaining deprecated calls in API.
   Crypto backend no longer use API deprecated in OpenSSL 3.0


* Check if kernel device-mapper create device failed in an early phase.
   This happens when a concurrent creation of device-mapper devices
   meets in the very early state.

* Do not set compiler optimization flag for Argon2 KDF if the memory
   wipe is implemented in libc.

* Do not attempt to unload LUKS2 tokens if external tokens are disabled.
   This allows building a static binary with  --disable-external-tokens.

* LUKS convert: also check sysfs for device activity.
   If udev symlink is missing, code fallbacks to sysfs scan to prevent
   data corruption for the active device.

[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 147 bytes --]

_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de