Format: 1.8 Date: Fri, 01 Jul 2016 16:32:02 -0400 Source: cryptsetup Binary: cryptsetup cryptsetup-bin libcryptsetup4 libcryptsetup-dev cryptsetup-udeb libcryptsetup4-udeb Architecture: source Version: 2:1.7.2-0ubuntu1~16.04 Distribution: xenial Urgency: medium Maintainer: Ubuntu Developers Changed-By: Unit 193 Description: cryptsetup - disk encryption support - startup scripts cryptsetup-bin - disk encryption support - command line tools cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb) libcryptsetup-dev - disk encryption support - development files libcryptsetup4 - disk encryption support - shared library libcryptsetup4-udeb - disk encryption support - shared library (udeb) (udeb) Closes: 697156 720515 767921 772943 780864 781674 781955 782024 783298 784129 784435 786578 792552 794106 801471 801479 805353 806290 810380 Launchpad-Bugs-Fixed: 1548137 Changes: cryptsetup (2:1.7.2-0ubuntu1~16.04) xenial; urgency=medium . * No-change backport to xenial . cryptsetup (2:1.7.2-0ubuntu1) yakkety; urgency=medium . * New upstream release, merge from Debian unstable (LP: #1548137). Remaining Ubuntu changes: - debian/control: + Bump initramfs-tools Suggests to Depends: so system is not potentially rendered unbootable. + Depend on plymouth. + Invert the "busybox | busybox-static" Recommends, as the latter is the one we ship in main as part of the ubuntu-standard task. + Drop explicit libgcrypt20 dependency from libcryptsetup4. . cryptsetup (2:1.7.0-2) unstable; urgency=medium . [ Guilhem Moulin ] * Fix cryptsetup shutdown procedure on sysvinit, broken since 2:1.7.0-1 for systems without active crypttab entry at the time fo the shutdown. (Closes: #792552, #810380) . cryptsetup (2:1.7.0-1) unstable; urgency=medium . [ Jonas Meurer ] * new upstream release 1.7.0. Highlights include: - cryptsetup TCRYPT mode now supports VeraCrypt devices (in 1.6.7) - fix activation using (UNSECURE) ECB mode (in 1.6.7) (closes: #784129) - properly support stdin "-" handling for luksAddKey for both new and old keyfile parameters. (in 1.6.8) - default hash function is now SHA256 (used in key derivation function and anti-forensic splitter) (in 1.7.0) * debian/cryptsetup.functions, debian/initramfs/cryptroot.{hook,script}: add support for veracrypt option to cryptdisks initscript and cryptroot initramfs script. (closes: #806290) * debian/cryptdisks.functions: don't use '--key-file=-' with the tcrypt extension. This fixes the tcrypt implementation in the initscript and provides a workaround for upstream issue #269. * debian/cryptsetup.bug-script: do not send potentially private information without prior user confirmation in reportbug script. (Closes: #783298) * debian/cryptsetup.apport: do not send potentially private information without prior user confirmation in apport hook. * debian/control, debian/NEWS: fix links to cryptsetup homepage/FAQ. Homepage (and FAQ) moved from code.google.com to gitlab.com. (closes: #781674) * debian/*: update hyperlinks to use https instead of http where appropriate. * debian/rules, debian/post{inst,rm}: don't install cryptdisks_st{art,op} symlinks to /usr/sbin if everything-in-usr directories scheme is used. Thanks to Marco d'Itri for the patch. (closes: #767921) * debian/scripts/luksformat: search for mkfs binaries in /usr/sbin, /usr/bin, /sbin and /bin (default order in $PATH). This fixes luksformat for btrfs filesystems. (closes: #805353) * debian/dirs, debian/rules: install cryptdisks bash-completion script into /usr/share/bash-completion/completions. * debian/cryptdisks.functions: iterate over remaining open crypttab devices in do_stop() in order to close dependent devices and don't freeze the shutdown process. Thanks to Avatar for the patch. (closes: #792552) * debian/rules: set V=1 in order to make build logs usable for blhc. * debian/rules: set DEB_VERSION and DEB_DATE in a way to make cryptsetup build reproducible. Thanks to Dhole and Valentin Lorentz for patches. (closes: #780864, #794106) * debian/cryptdisks.functions: bring the passphrase prompt in line with the one from initramfs script in order to make the user experience more consistent. (closes: #772943) * debian/initramfs/cryptroot-script: move sanity checks of $cryptkeyscript and potential expansion to '/lib/cryptsetup/askpass' to the beginning of setup_mapping(). . [ Guilhem Moulin ] * debian/README.{Debian,remote}: remove dropbear-specific configuration and point to dropbear-initramfs instead. Since version 2015.70-1, dropbear ships dropbear-specific initramfs configuration and documentation in an own binary package dropbear-initramfs. (closes: #801471) * debian/initramfs/cryptroot-{hook,script}: add support for 'keyslot' option to cryptroot initramfs script. (closes: #801479) * debian/README.initramfs, debian/initramfs/cryptroot-hook: add support for storing keyfiles directly in the initrd. (closes: #786578) * debian/initramfs/cryptroot-hook: display a warning for invalid source devices. (closes: #720515, #781955, #784435) * debian/askpass.c: add plymouth support to the askpass helper command. * debian/cryptdisks.functions, debian/initramfs/cryptroot-script: remove special treatment of plymouth installations now that askpass supports plymouth natively. * debian/initramfs/cryptroot-unlock(-hook): add initramfs hook and script to remotely unlock cryptroot devices. (closes: #782024, #697156) Checksums-Sha1: c15354534dd64b9c60fcb3fdd3a8a015abcea271 2783 cryptsetup_1.7.2-0ubuntu1~16.04.dsc 1b7005c0f8ad286a7f3d65e99cb555597666605c 1222688 cryptsetup_1.7.2.orig.tar.xz c525e6979890b1bb05460d691b792c7b3d244090 92716 cryptsetup_1.7.2-0ubuntu1~16.04.debian.tar.xz Checksums-Sha256: 891756662f4ab40977e8ec7adab14381598f182c3f2c241d7b7daa58e07fb790 2783 cryptsetup_1.7.2-0ubuntu1~16.04.dsc dbb35dbf5f0c1749168c86c913fe98e872247bfc8425314b494c2423e7e43342 1222688 cryptsetup_1.7.2.orig.tar.xz 4bf9230f636107bb3e231e536ab9ad8b8684234cd1ff7a16959565819e446d13 92716 cryptsetup_1.7.2-0ubuntu1~16.04.debian.tar.xz Checksums-Sha512: d9fc1d65907d2adb11fb22f70b9431dcd540c6a42e52464df0efc6fd4674d35b35d216148ebda41ca389e7327210d787e8f5d3ce2e3514a46f0c9707d6153f1f 2783 cryptsetup_1.7.2-0ubuntu1~16.04.dsc ff761bd0c5e9a7941fd27d55839804f2ce96145a45a9689d234954fc43c6172c913c59c83b37ef6cc5459ccecff63212c369077fdea70c14326372076eae7f86 1222688 cryptsetup_1.7.2.orig.tar.xz b2d77a8072a42d56c1fff565972dc7adde9ace658ed15dca8914a6e8af6cf3633e7712a72b2bf00cea6b05b3d1343d38cda2043779ca7f6ee00658440643e50a 92716 cryptsetup_1.7.2-0ubuntu1~16.04.debian.tar.xz Files: 1b1d8b0b7e150a4b4fb84c8728862b9b 2783 admin optional cryptsetup_1.7.2-0ubuntu1~16.04.dsc a11a140cea496961222170944db01fc1 1222688 admin optional cryptsetup_1.7.2.orig.tar.xz 86b9b604934c7aa3f2b385a096cd3a0f 92716 admin optional cryptsetup_1.7.2-0ubuntu1~16.04.debian.tar.xz Original-Maintainer: Debian Cryptsetup Team