From 8a0682650ee3e033e4edb44a548fa2abdcabc99d Mon Sep 17 00:00:00 2001 From: Milan Broz Date: Wed, 15 Sep 2021 11:29:09 +0200 Subject: [PATCH] Version 2.4.1. --- README.md | 8 +++---- configure.ac | 2 +- docs/v2.4.1-ReleaseNotes | 47 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 52 insertions(+), 5 deletions(-) create mode 100644 docs/v2.4.1-ReleaseNotes diff --git a/README.md b/README.md index a523e3d7..584c145d 100644 --- a/README.md +++ b/README.md @@ -46,11 +46,11 @@ Download -------- All release tarballs and release notes are hosted on [kernel.org](https://www.kernel.org/pub/linux/utils/cryptsetup/). -**The latest stable cryptsetup version is 2.4.0** - * [cryptsetup-2.4.0.tar.xz](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/cryptsetup-2.4.0.tar.xz) - * Signature [cryptsetup-2.4.0.tar.sign](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/cryptsetup-2.4.0.tar.sign) +**The latest stable cryptsetup version is 2.4.1** + * [cryptsetup-2.4.1.tar.xz](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/cryptsetup-2.4.1.tar.xz) + * Signature [cryptsetup-2.4.1.tar.sign](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/cryptsetup-2.4.1.tar.sign) _(You need to decompress file first to check signature.)_ - * [Cryptsetup 2.4.0 Release Notes](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/v2.4.0-ReleaseNotes). + * [Cryptsetup 2.4.1 Release Notes](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.4/v2.4.1-ReleaseNotes). Previous versions * [Version 2.3.6](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.3/cryptsetup-2.3.6.tar.xz) - diff --git a/configure.ac b/configure.ac index f0a6e460..0805bd20 100644 --- a/configure.ac +++ b/configure.ac @@ -1,5 +1,5 @@ AC_PREREQ([2.67]) -AC_INIT([cryptsetup],[2.4.1-rc0]) +AC_INIT([cryptsetup],[2.4.1]) dnl library version from ..[-] LIBCRYPTSETUP_VERSION=$(echo $PACKAGE_VERSION | cut -f1 -d-) diff --git a/docs/v2.4.1-ReleaseNotes b/docs/v2.4.1-ReleaseNotes new file mode 100644 index 00000000..7aac27dc --- /dev/null +++ b/docs/v2.4.1-ReleaseNotes @@ -0,0 +1,47 @@ +Cryptsetup 2.4.1 Release Notes +============================== +Stable bug-fix release with minor extensions. + +All users of cryptsetup 2.4.0 should upgrade to this version. + +Changes since version 2.4.0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +* Fix compilation for libc implementations without dlvsym(). + + Some alternative libc implementations (like musl) do not provide + versioned symbols dlvsym function. Code now fallbacks to dlsym + operation for dynamic LUKS2 token load. + It is up to maintainers to ensure that LUKS2 token plugins are + compiled for the supported version. + +* Fix compilation and tests on systems with non-standard libraries + (standalone argp library, external gettext library, BusyBox + implementations of standard tools). + +* Try to workaround some issues on systems without udev support. + NOTE: non-udev systems cannot provide all functionality for kernel + device-mapper, and some operations can fail. + +* Fixes for OpenSSL3 crypto backend (including FIPS mode). + Because cryptsetup still requires some hash functions implemented + in OpenSSL3 legacy provider, crypto backend now uses its library + context and tries to load both default and legacy OpenSSL3 providers. + + If FIPS mode is detected, no library context is used, and it is up + to the OpenSSL system-wide policy to load proper providers. + + NOTE: We still use some deprecated API in the OpenSSL3 backend, + and there are some known problems in OpenSSL 3.0.0. + +* Print error message when assigning a token to an inactive keyslot. + +* Fix offset bug in LUKS2 encryption code if --offset option was used. + +* Do not allow LUKS2 decryption for devices with data offset. + Such devices cannot be used after decryption. + +* Fix LUKS1 cryptsetup repair command for some specific problems. + Repair code can now fix wrongly used initialization vector + specification in ECB mode (that is insecure anyway!) and repair + the upper-case hash specification in the LUKS1 header.