[pkg-cryptsetup-devel] cryptsetup_2.3.3-2~bpo10+1_amd64.changes ACCEPTED into buster-backports, buster-backports
Debian FTP Masters
ftpmaster at ftp-master.debian.org
Fri Aug 21 11:00:20 BST 2020
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 17 Aug 2020 23:46:34 +0200
Source: cryptsetup
Binary: cryptsetup cryptsetup-bin cryptsetup-bin-dbgsym cryptsetup-dbgsym cryptsetup-initramfs cryptsetup-run cryptsetup-udeb libcryptsetup-dev libcryptsetup12 libcryptsetup12-dbgsym libcryptsetup12-udeb
Architecture: source amd64 all
Version: 2:2.3.3-2~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel at alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem at debian.org>
Description:
cryptsetup - disk encryption support - startup scripts
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-initramfs - disk encryption support - initramfs integration
cryptsetup-run - transitional dummy package for cryptsetup
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup12 - disk encryption support - shared library
libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 904916 913233 916649 918008 930115 930696 932625 932643 933142 934715 935702 939766 948593 949623 950628 959423 963696 964092 967853 968250
Changes:
cryptsetup (2:2.3.3-2~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports. (Closes: #963696)
.
cryptsetup (2:2.3.3-2) unstable; urgency=medium
.
[ Helmut Grohne ]
* d/control: Annotate Build-Depends with <!nocheck>. (Closes: #964092)
.
[ Guilhem Moulin ]
* d/rules: Build with `--with-tmpfilesdir` to force installing
usr/lib/tmpfiles.d/cryptsetup.conf instead of picking the source from
scripts/cryptsetup.conf. This fixes FTBS in environments containing
systemd. (Closes: #968250)
* Add 'bitlk' flag in crypttab(5) to force detection of Windows BitLocker
volumes. (Closes: #967853)
.
cryptsetup (2:2.3.3-1) unstable; urgency=medium
.
[ Guilhem Moulin ]
* New upstream bugfix release.
* d/scripts/decrypt_derived: Remove useless call to `| tr -d '\n'`.
* d/control: Bump debhelper compatibility level to 13. Remove
debian/tmp/lib/$DEB_HOST_MULTIARCH/libcryptsetup.la as we don't install it
anywhere.
.
[ Rob Pilling ]
* d/scripts/decrypt_derived:
+ move an error message to standard error so it's not accidentally used as
a key
+ exit with a success code when successful
.
cryptsetup (2:2.3.2-1) unstable; urgency=medium
.
* New upstream release.
* debian/control: Set 'Rules-Requires-Root: no'.
* d/initramfs/hooks/cryptroot: Unconditionally copy 'ecb' kernel module
when the host CPU lacks AES-NI support. On such systems XTS needs ECB.
This is a work around for #883595 on kernels 4.10 and later.
(Closes: #959423)
.
cryptsetup (2:2.3.1-1) unstable; urgency=medium
.
* New upstream release.
* d/initramfs/hooks/cryptroot: Don't set unused variable LIBC_DIR.
.
cryptsetup (2:2.3.0-1) unstable; urgency=low
.
* New upstream release, introducing support for BitLocker-compatible
devices (BITLK format) used in Windows systems.
WARNING: crypttab(5) support for these devices is currently *experimental*
and requires blkid from util-linux >=2.33 (i.e., Buster or later). These
devices currently have no keyword to use in the 4th field (unlike 'luks'
or 'plain'), the device type is inferred from the signature instead.
* crypttab(5): Make the 4th field (options) optional so we don't have to
introduce a new keyword for each new device type. (That field is also
optional in the systemd implementation.) Other fields (dm target name,
source device, and key file) remain required.
* Install cryptdisks_{start,stop} bash completion scripts to the right
path/name so they are loaded automatically. This was no longer the case
since 2:1.7.0-1. (Closes: #949623)
* d/*.install: Replace tabs with spaces.
* d/cryptdisks-functions: Fix broken $FORCE_START handling. Since
2:2.0.3-2 the SysV init scripts' "force-start" option was no longer
overriding noauto/noearly. (Closes: #933142)
* Move some functions to d/function from the initramfs hook.
* SysV init scripts: skip devices holding the root FS and/or /usr during the
shutdown phase; these file systems are still mounted at this point so any
attempt to gracefully close the underlying device(s) is bound to fail.
(Closes: #916649, #918008)
* Bump Standards-Version to 4.5.0 (no changes necessary).
.
cryptsetup (2:2.2.2-3) unstable; urgency=high
.
* initramfs hook: Workaround fix for the libgcc_s's source location.
(Closes: #950628, #939766.) Fixing #950254 will provide a better
solution.
.
cryptsetup (2:2.2.2-2) unstable; urgency=medium
.
[ Guilhem Moulin ]
* d/initramfs/hooks/cryptroot: On initramfs images built with MODULES=dep,
include the IV generator found in the cipher specification when there is a
matching kernel module. On 5.4 kernels ESSIV isn't implemented in
dm_crypt anymore, but by a dedicated 'essiv' module which thus needs to be
available in order to unlock dm-crypt target using 'aes-cbc-essiv:sha256'.
Closes: #948593.
.
[ Debian Janitor ]
* Set debhelper-compat version in Build-Depends.
* Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
Repository-Browse.
.
cryptsetup (2:2.2.2-1) unstable; urgency=medium
.
* New upstream bugfix release.
* debian/control:
+ Add 'procps' to the Build-Depends since the upstream test suite uses
free(1).
+ Bump Standards-Version to 4.4.1 (no changes necessary).
.
cryptsetup (2:2.2.1-1) unstable; urgency=medium
.
* New upstream bugfix release.
* Remove d/patches, applied upstream.
.
cryptsetup (2:2.2.0-3) unstable; urgency=medium
.
* Cherry pick upstream commit 8f8f0b32: Fix mapped segments overflow on
32bit architectures. Regression since 2:2.1.0-1. (Closes: #935702)
.
cryptsetup (2:2.2.0-2) unstable; urgency=medium
.
* debian/control: Add 'Multi-Arch: foreign' tag to the transitional dummy
package 'crytsetup-run'.
* debian/control, debian/compat: Bump debhelper compatibility level to 12.
* debian/rules: Remove dh_makeshlibs(1) override; debhelper 12.3's auto
detection feature subsumes our use of --add-udeb=. This fixes FTBFS with
debhelper 12.5.
.
cryptsetup (2:2.2.0-1) unstable; urgency=medium
.
* New upstream release 2.2.0. Highlights include:
+ New LUKS2 online reencryption extension, allowing reencryption of
mounted LUKS2 devices.
+ Optional global serialization lock for memory hard PBKDF, to workaround
situations when multiple devices are unlocked in parallel, possibly
exhausting memory and triggering the OOM killer. (Cf. #924560.)
+ Add integritysetup support for bitmap mode (Linux >=5.2).
+ Reduce keyslots area size in luksFormat when the header device is too
small.
* Remove d/patches, applied upstream.
.
cryptsetup (2:2.1.0-8) unstable; urgency=medium
.
* encrypted-boot.md:
+ Clarify partition layout.
+ encrypted-boot.md: New section 'Using a custom keyboard layout'.
* d/gbp.conf: New section [export-orig] mirroring [buildpackage].
* d/gitlab-ci.yml: Add 'publish' stage and make yamllint(1) happy.
* d/patches: Backport upstream commit c03e3fe8 so libcryptsetup's
crypt_keyslot_add_by_volume_key() also works a on LUKS2 header where all
bound key slots were deleted, like it does for LUKS1. (Closes: #934715)
.
cryptsetup (2:2.1.0-7) unstable; urgency=low
.
* debian/cryptsetup.NEWS: Mention the 'cryptsetup' and 'cryptsetup-run'
package swap.
* debian/control: Add 'cryptsetup-initramfs' to 'cryptsetup's Recommends:,
so upgrading systems pull it automatically on upgrade. (cryptsetup
<2:2.1.0-6 was a dummy transitional package depending on cryptsetup-run
and cryptsetup-initramfs.) Closes: #932643.
* debian/control: Add 'cryptsetup-run' to 'cryptsetup's Recommends. This
avoids it being removed by `apt upgrade --autoremove` from <2:2.1.0-6,
thus avoids the old cryptsetup-run's prerm script showing a scary (but
moot) warning. After upgrading the prerm script is gone and the package
can be removed without troubles, so we can get rid of it after Bullseye.
(Closes: #932625.)
* cryptsetup-initramfs: Add loud warning upon "prerm remove" if there are
mapped crypt devices (like for cryptsetup.prerm).
* Thanks to David Prévot for helping with the upgrade path!
.
cryptsetup (2:2.1.0-6) unstable; urgency=low
.
* debian/control:
+ Add 'Multi-Arch: foreign' tags to 'cryptsetup-bin' and 'crytsetup-run',
as binaries from these packages are architecture independent.
(Closes: #930115)
+ Add 'Build-Depends: jq, xxd' as the jq(1) and xxd(1) executables are
required for some upstream tests (skipped if the executables are not
found in $PATH).
+ Swap 'cryptsetup' and 'cryptsetup-run' packages: the former now contains
init scripts, libraries, keyscripts, etc. while the latter is now a
transitional dummy package.
+ Remove obsolete cryptsetup.maintscript.
+ Bump Standards-Version to 4.4.0 (no changes necessary).
* debian/*:
+ Fix path names for /usr/share/doc/cryptsetup*/**. (Closes: #904916).
+ Remove compatibility warnings regarding setting 'CRYPTSETUP' in
the initramfs hook configuration. The variable is no longer honored,
and cryptsetup is always integrated to the initramfs when the
'cryptsetup-initramfs' package is installed.
* debian/doc/pandoc/encrypted-boot.md: Minor refactoring.
* debian/gitlab-ci.yml: Adapt pandoc flags to Debian 9 (pass '-S').
* debian/initramfs/conf-hook: Clarify that KEYFILE_PATTERN isn't expanded
for crypttab(5) entries with a 'keyscript=' option. (Closes: #930696)
* debian/doc/crypttab.xml: Point to README.initramfs in the "See Also"
section. (Closes: #913233)
Checksums-Sha1:
87d6bfa8de5907c4cc1a86cb64209b2214d8429a 2897 cryptsetup_2.3.3-2~bpo10+1.dsc
f5064e838c6d952ab1935edd20f328d98abe4103 114316 cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz
94bd114bfa560b35732c4b98741420a7e9633463 231052 cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb
0b7b7f2ab10b315e6ad44f9a83ac38f9991b8d9b 398156 cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb
dff22f6a0c638c07e411973a9406aa4d7a3569ba 18480 cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb
f5f2ab611bb9334120260465e432ec1433dd6357 71068 cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb
4785a50c9ff84b21b20f8771c94019f3501418e2 53404 cryptsetup-run_2.3.3-2~bpo10+1_all.deb
da2fb944af4d33bbf174bfc97591137012f2b8fb 64804 cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb
33a715c70c5358b77c31d8de8216d411e179f858 9689 cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo
0759968c6cd8fad6653b68cf9c66f1b9b3331a2e 218876 cryptsetup_2.3.3-2~bpo10+1_amd64.deb
fae970971bf96e90528c0839c583dae150e29f4b 70460 libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb
033ed6193720a3363835808a1164e50833940722 536992 libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb
71e58bc52fd4f2968e9138bc4d0418767fdc6d08 186384 libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb
16678deefba59dcf1a3e663d7b8e7fe09fcd59ae 239264 libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb
Checksums-Sha256:
4acbeb6a597430ad7e01cf8ae91c27ead7386b81de177df7d64282c2dc5082c9 2897 cryptsetup_2.3.3-2~bpo10+1.dsc
a036b6c2e126eddbdd7a535d7a51076cbc68001bd96a5ef3bf5d042fde09fd5f 114316 cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz
346f42d360220819fe076a934aaaf3ec4a79a30221ff7bac892feefc0bf5bbf2 231052 cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb
78692038aab4759f91c264b44373bf728a92e3e0e7ade2315eaa82aa2e55e2ca 398156 cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb
1533256eb12e18d8a1b21133e22003c79b355cd45f6c2e951efd6006b9dc225a 18480 cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb
7aef0c17a5bb79f7ef9f1ac2f08fac95ffc073e54bc60e60fa426b8215223142 71068 cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb
71bf0f7cc2cb598c9bd9e722ac64cc2c8f23efdc106fd18eefc16a98b182a8b9 53404 cryptsetup-run_2.3.3-2~bpo10+1_all.deb
13dffd1b499e3a8e3705aa6261018422bac489bb48e42c5ce1525606affe676e 64804 cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb
b7d5614eb07a36241e91be48cea8c506ec99652ae5a0d04e7744f34a9211312e 9689 cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo
a88819153cb76cfa0122f645d652a90910cbc3bcd765ba80c43cebfe74bc8239 218876 cryptsetup_2.3.3-2~bpo10+1_amd64.deb
0f297cbd49a207d14c2d1ad23411bf25fc11152d31b4bb382693c5e9dcc6fa28 70460 libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb
2900d2109b62d5606721612bf24baf0047dce40a05f650fec09807124c9729a8 536992 libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb
acbbe45c9148878a611ce65a6098b418add647ad2431c6d6ed202d904044c1ce 186384 libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb
5f00a824cc8d2a5d1931c03b2e0eb1ce6d7b5df8e2daa8c628377708435cebfd 239264 libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb
Files:
390bca37944c939cf2df0e75f36a3548 2897 admin optional cryptsetup_2.3.3-2~bpo10+1.dsc
3a209bcd73d16760929fda865e3f4aec 114316 admin optional cryptsetup_2.3.3-2~bpo10+1.debian.tar.xz
ee48329e106060bf8fd3e021d27aa507 231052 debug optional cryptsetup-bin-dbgsym_2.3.3-2~bpo10+1_amd64.deb
f144074d4b47626dac7e5aa30c78317d 398156 admin optional cryptsetup-bin_2.3.3-2~bpo10+1_amd64.deb
d58bee010f5a6c8b1a77db7de5257706 18480 debug optional cryptsetup-dbgsym_2.3.3-2~bpo10+1_amd64.deb
154ff8d0531faeaa7b1091f6caaa1fbe 71068 admin optional cryptsetup-initramfs_2.3.3-2~bpo10+1_all.deb
b28735206ff5c61a73cb25a10fa301d7 53404 oldlibs optional cryptsetup-run_2.3.3-2~bpo10+1_all.deb
805f651deb1e14a242342066d04bb711 64804 debian-installer optional cryptsetup-udeb_2.3.3-2~bpo10+1_amd64.udeb
53919af5db7611a06d05ec4f3671083e 9689 admin optional cryptsetup_2.3.3-2~bpo10+1_amd64.buildinfo
73823b73dd767fec1016fbf0efb860f6 218876 admin optional cryptsetup_2.3.3-2~bpo10+1_amd64.deb
44ab928a572f29d68a5d4a35ecd221d7 70460 libdevel optional libcryptsetup-dev_2.3.3-2~bpo10+1_amd64.deb
b0720d09ad14e44e5bd7598c5ccff396 536992 debug optional libcryptsetup12-dbgsym_2.3.3-2~bpo10+1_amd64.deb
2c891c99b50979ec4dd7ed7d925f4ed5 186384 debian-installer optional libcryptsetup12-udeb_2.3.3-2~bpo10+1_amd64.udeb
1d3d2a9b27181d0e8d037f727fa4814c 239264 libs optional libcryptsetup12_2.3.3-2~bpo10+1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=rvYf
-----END PGP SIGNATURE-----
Thank you for your contribution to Debian.
More information about the pkg-cryptsetup-devel
mailing list