From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <SRS0=sFIa=OF=saout.de=dm-crypt-bounces@kernel.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
X-Spam-Level: 
X-Spam-Status: No, score=-7.0 required=3.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,
	SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no
	autolearn_force=no version=3.4.0
Received: from mail.kernel.org (mail.kernel.org [198.145.29.99])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 62501C433EF
	for <dm-crypt@archiver.kernel.org>; Wed, 15 Sep 2021 10:01:32 +0000 (UTC)
Received: from mail.server123.net (mail.server123.net [78.46.64.186])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.kernel.org (Postfix) with ESMTPS id DE50460F26
	for <dm-crypt@archiver.kernel.org>; Wed, 15 Sep 2021 10:01:31 +0000 (UTC)
DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org DE50460F26
Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com
Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=saout.de
X-Virus-Scanned: amavisd-new at saout.de
Authentication-Results: mail.server123.net (amavisd-new);
	dkim=pass (2048-bit key) header.d=gmail.com
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::42a; helo=mail-wr1-x42a.google.com; envelope-from=gmazyland@gmail.com; receiver=<UNKNOWN> 
Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by mail.server123.net (Postfix) with ESMTPS
	for <dm-crypt@saout.de>; Wed, 15 Sep 2021 11:58:52 +0200 (CEST)
Received: by mail-wr1-x42a.google.com with SMTP id d6so2890959wrc.11
        for <dm-crypt@saout.de>; Wed, 15 Sep 2021 02:58:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=from:subject:to:message-id:date:user-agent:mime-version;
        bh=Ye4xkphh7fVxl0F9B6VChWXCRuYdqfAghlC7hglOovM=;
        b=fE+VIA6fHiwNhs4QI7S8AEDdkAl4czc8QZ37bUL8osPlEjUUEBjxgeKb82Ps2Zqh+s
         +WE8nUGbrzFyC5gz/uF8lOh+OdzSuLEVjtO1XS6BRJ4pIR9OkYvMdrddA0Kby2AiaXd2
         1dOplDS8H4KcnoOklCQNCzeQqxJ5w/tOBLTE50Jo1Q/QTK1/hSNMBNmS6x2mJ6t1q7Y2
         DGGw1V9JCg0UvU2GNtrthtwOroveTlUSaOkyLiReYLKYh724duLYFDRyFsjdxtj2y/7/
         rowIo/GaY1zeFyFUgz8FbKMcZVGV/N1rTuNGwyucGmtjGGXEQOi+cj0LQF3jcd3kNKzs
         Ecng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=x-gm-message-state:from:subject:to:message-id:date:user-agent
         :mime-version;
        bh=Ye4xkphh7fVxl0F9B6VChWXCRuYdqfAghlC7hglOovM=;
        b=PN1LaQxq3+R6y8xFilIEEvchmuUFMOLo0YeAPC9ktrgcg54l4icrFUILKzbonZIOAn
         vPh8Zi45KOsKLFMoyy8GaWg+Kg36BVH/qVYVvuSjE7FZE8oB9yTPx6qf7D9jOxmqpSyT
         T9urzjQASj1IoX087sIVwWxVfy3Jp6H0E49mwd+827khMgXP4zVjJHEv0X95JVsYbl+b
         9QklY2NyZhTuOO8o2s0hq0FwmB120Fm1aIElyBuiNguoKjfHxS1BRGQoFWgFGpzaybv2
         tbpjn0z6jbERnxX6sBmREeFNwgHIPMFYx0nb7mKgb1F6nhxgPINWsB4wSoMh8k/8Hi5w
         xhIw==
X-Gm-Message-State: AOAM531xPjcE9iVJpsq3b7kvhTI0uDnJhLhUyIkqM/7QhQpgRZoYznNK
	KXN+I2Mz3DTNTXR4t9Rvjvl0+EYpcyI=
X-Google-Smtp-Source: ABdhPJy6guj31/i32BxYDSW1Cs1inlIEaqpKIjqjsGb4H52sr1zB7hP8e52iDSHAZ8i8icgxNTJLqQ==
X-Received: by 2002:adf:b781:: with SMTP id s1mr4006806wre.165.1631699932285;
        Wed, 15 Sep 2021 02:58:52 -0700 (PDT)
Received: from [192.168.2.27] (39.35.broadband4.iol.cz. [85.71.35.39])
        by smtp.gmail.com with ESMTPSA id f20sm3676163wmb.32.2021.09.15.02.58.50
        for <dm-crypt@saout.de>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Wed, 15 Sep 2021 02:58:51 -0700 (PDT)
From: Milan Broz <gmazyland@gmail.com>
To: dm-crypt <dm-crypt@saout.de>
Message-ID: <23e036ba-bb02-1157-f5bc-63eb9a0eea7a@gmail.com>
Date: Wed, 15 Sep 2021 11:58:44 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.14.0
MIME-Version: 1.0
Message-ID-Hash: DACCFFHAV733WZ6STGMPU54QV3OEE6SR
X-Message-ID-Hash: DACCFFHAV733WZ6STGMPU54QV3OEE6SR
X-MailFrom: gmazyland@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dm-crypt.saout.de-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header
X-Mailman-Version: 3.3.2
Precedence: list
Subject: [dm-crypt] [ANNOUNCE] cryptsetup 2.4.1
List-Id: <dm-crypt.saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Post: <mailto:dm-crypt@saout.de>
List-Subscribe: <mailto:dm-crypt-join@saout.de>
List-Unsubscribe: <mailto:dm-crypt-leave@saout.de>
Content-Type: multipart/mixed; boundary="===============7077270286312200004=="

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7077270286312200004==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="3424YGNyNSdSNAyujr2GAcbyMM7gf2Lfc"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--3424YGNyNSdSNAyujr2GAcbyMM7gf2Lfc
Content-Type: multipart/mixed; boundary="IAJ4OkIPp9zkmgH2prr6WQwgACtzjMYRZ";
 protected-headers="v1"
From: Milan Broz <gmazyland@gmail.com>
To: dm-crypt <dm-crypt@saout.de>
Message-ID: <23e036ba-bb02-1157-f5bc-63eb9a0eea7a@gmail.com>
Subject: [ANNOUNCE] cryptsetup 2.4.1

--IAJ4OkIPp9zkmgH2prr6WQwgACtzjMYRZ
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

The cryptsetup 2.4.1 stable release is available at

     https://gitlab.com/cryptsetup/cryptsetup

Please note that release packages are located on kernel.org

     https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/

Feedback and bug reports are welcomed.

Cryptsetup 2.4.1 Release Notes
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D
Stable bug-fix release with minor extensions.

All users of cryptsetup 2.4.0 should upgrade to this version.

Changes since version 2.4.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Fix compilation for libc implementations without dlvsym().

  Some alternative libc implementations (like musl) do not provide
  versioned symbols dlvsym function. Code now fallbacks to dlsym
  operation for dynamic LUKS2 token load.
  It is up to maintainers to ensure that LUKS2 token plugins are
  compiled for the supported version.

* Fix compilation and tests on systems with non-standard libraries
  (standalone argp library, external gettext library, BusyBox
  implementations of standard tools).

* Try to workaround some issues on systems without udev support.
  NOTE: non-udev systems cannot provide all functionality for kernel
  device-mapper, and some operations can fail.

* Fixes for OpenSSL3 crypto backend (including FIPS mode).
  Because cryptsetup still requires some hash functions implemented
  in OpenSSL3 legacy provider, crypto backend now uses its library
  context and tries to load both default and legacy OpenSSL3 providers.

  If FIPS mode is detected, no library context is used, and it is up
  to the OpenSSL system-wide policy to load proper providers.

  NOTE: We still use some deprecated API in the OpenSSL3 backend,
  and there are some known problems in OpenSSL 3.0.0.

* Print error message when assigning a token to an inactive keyslot.

* Fix offset bug in LUKS2 encryption code if --offset option was used.

* Do not allow LUKS2 decryption for devices with data offset.
  Such devices cannot be used after decryption.

* Fix LUKS1 cryptsetup repair command for some specific problems.
  Repair code can now fix wrongly used initialization vector
  specification in ECB mode (that is insecure anyway!) and repair
  the upper-case hash specification in the LUKS1 header.


--IAJ4OkIPp9zkmgH2prr6WQwgACtzjMYRZ--

--3424YGNyNSdSNAyujr2GAcbyMM7gf2Lfc
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----
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=dG9R
-----END PGP SIGNATURE-----

--3424YGNyNSdSNAyujr2GAcbyMM7gf2Lfc--

--===============7077270286312200004==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de

--===============7077270286312200004==--