Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 939797 - sys-fs/cryptsetup-2.7.5: stabilisation
Summary: sys-fs/cryptsetup-2.7.5: stabilisation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords: CC-ARCHES
Depends on:
Blocks:
 
Reported: 2024-09-17 23:51 UTC by Sam James
Modified: 2025-01-04 20:27 UTC (History)
0 users

See Also:
Package list:
sys-fs/cryptsetup-2.7.5
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-17 23:51:52 UTC
```
--- /tmp/mgorny-dev-scripts/portage/sys-fs/cryptsetup-2.7.4/work/cryptsetup-2.7.4/docs/v2.7.5-ReleaseNotes      1970-01-01 01:00:00.000000000 +0100
+++ /tmp/mgorny-dev-scripts/portage/sys-fs/cryptsetup-2.7.5/work/cryptsetup-2.7.5/docs/v2.7.5-ReleaseNotes      2024-09-02 21:52:19.000000000 +0100
@@ -0,0 +1,23 @@
+Cryptsetup 2.7.5 Release Notes
+==============================
+Stable bug-fix release.
+
+All users of cryptsetup 2.7 must upgrade to this version.
+
+Changes since version 2.7.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+* Fix possible online reencryption data corruption (only in 2.7.x).
+
+  In some situations (initializing a suspended device-mapper device),
+  cryptsetup disabled direct-io device access. This caused unsafe
+  online reencryption operations that could lead to data corruption.
+  The code now adds strict checks (and aborts the operation) and
+  changes direct-io detection code to prevent data corruption.
+
+* Fix a clang compilation error in SSH token plugin.
+
+  As clang linker treats missing symbols as errors, the linker phase
+  for the SSH token failed as the optional cryptsetup_token_buffer_free
+  was not defined.
+
+* Fix crypto backend initialization in crypt_format_luks2_opal API call.
```

Let's stabilise given the corruption issue mentioned.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 02:45:48 UTC
ppc done
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 02:45:49 UTC
ppc64 done
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 02:55:41 UTC
amd64 done
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 02:55:42 UTC
x86 done
Comment 5 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 06:36:26 UTC
arm done
Comment 6 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 06:36:26 UTC
arm64 done
Comment 7 NATTkA bot gentoo-dev Security 2024-09-22 08:28:09 UTC Comment hidden (obsolete)
Comment 8 NATTkA bot gentoo-dev Security 2024-09-22 16:48:15 UTC Comment hidden (obsolete)
Comment 9 NATTkA bot gentoo-dev Security 2024-12-24 03:37:14 UTC Comment hidden (obsolete)
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-12-24 05:05:46 UTC
sparc done
Comment 11 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 20:27:04 UTC
hppa done

all arches done