Accepted cryptsetup 2:1.7.0-1 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 07 Jan 2016 02:22:33 +0100
Source: cryptsetup
Binary: cryptsetup cryptsetup-bin libcryptsetup4 libcryptsetup-dev cryptsetup-udeb libcryptsetup4-udeb
Architecture: source amd64
Version: 2:1.7.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel@lists.alioth.debian.org>
Changed-By: Jonas Meurer <mejo@debian.org>
Description:
cryptsetup - disk encryption support - startup scripts
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup4 - disk encryption support - shared library
libcryptsetup4-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 697156 720515 767921 772943 780864 781674 781955 782024 783298 784129 784435 786578 792552 794106 801471 801479 805353 806290
Changes:
cryptsetup (2:1.7.0-1) unstable; urgency=medium
.
[ Jonas Meurer ]
* new upstream release 1.7.0. Highlights include:
- cryptsetup TCRYPT mode now supports VeraCrypt devices (in 1.6.7)
- fix activation using (UNSECURE) ECB mode (in 1.6.7) (closes: #784129)
- properly support stdin "-" handling for luksAddKey for both new and old
keyfile parameters. (in 1.6.8)
- default hash function is now SHA256 (used in key derivation function
and anti-forensic splitter) (in 1.7.0)
* debian/cryptsetup.functions, debian/initramfs/cryptroot.{hook,script}: add
support for veracrypt option to cryptdisks initscript and cryptroot
initramfs script. (closes: #806290)
* debian/cryptdisks.functions: don't use '--key-file=-' with the tcrypt
extension. This fixes the tcrypt implementation in the initscript and
provides a workaround for upstream issue #269.
* debian/cryptsetup.bug-script: do not send potentially private information
without prior user confirmation in reportbug script. (Closes: #783298)
* debian/cryptsetup.apport: do not send potentially private information
without prior user confirmation in apport hook.
* debian/control, debian/NEWS: fix links to cryptsetup homepage/FAQ. Homepage
(and FAQ) moved from code.google.com to gitlab.com. (closes: #781674)
* debian/*: update hyperlinks to use https instead of http where appropriate.
* debian/rules, debian/post{inst,rm}: don't install cryptdisks_st{art,op}
symlinks to /usr/sbin if everything-in-usr directories scheme is used.
Thanks to Marco d'Itri for the patch. (closes: #767921)
* debian/scripts/luksformat: search for mkfs binaries in /usr/sbin, /usr/bin,
/sbin and /bin (default order in $PATH). This fixes luksformat for btrfs
filesystems. (closes: #805353)
* debian/dirs, debian/rules: install cryptdisks bash-completion script into
/usr/share/bash-completion/completions.
* debian/cryptdisks.functions: iterate over remaining open crypttab devices
in do_stop() in order to close dependent devices and don't freeze the
shutdown process. Thanks to Avatar for the patch. (closes: #792552)
* debian/rules: set V=1 in order to make build logs usable for blhc.
* debian/rules: set DEB_VERSION and DEB_DATE in a way to make cryptsetup
build reproducible. Thanks to Dhole and Valentin Lorentz for patches.
(closes: #780864, #794106)
* debian/cryptdisks.functions: bring the passphrase prompt in line with the
one from initramfs script in order to make the user experience more
consistent. (closes: #772943)
* debian/initramfs/cryptroot-script: move sanity checks of $cryptkeyscript
and potential expansion to '/lib/cryptsetup/askpass' to the beginning of
setup_mapping().
.
[ Guilhem Moulin ]
* debian/README.{Debian,remote}: remove dropbear-specific configuration and
point to dropbear-initramfs instead. Since version 2015.70-1, dropbear
ships dropbear-specific initramfs configuration and documentation in an
own binary package dropbear-initramfs. (closes: #801471)
* debian/initramfs/cryptroot-{hook,script}: add support for 'keyslot' option
to cryptroot initramfs script. (closes: #801479)
* debian/README.initramfs, debian/initramfs/cryptroot-hook: add support for
storing keyfiles directly in the initrd. (closes: #786578)
* debian/initramfs/cryptroot-hook: display a warning for invalid source
devices. (closes: #720515, #781955, #784435)
* debian/askpass.c: add plymouth support to the askpass helper command.
* debian/cryptdisks.functions, debian/initramfs/cryptroot-script: remove
special treatment of plymouth installations now that askpass supports
plymouth natively.
* debian/initramfs/cryptroot-unlock(-hook): add initramfs hook and script
to remotely unlock cryptroot devices. (closes: #782024, #697156)
Checksums-Sha1:
f75ccf60620ed2c5bbc9db33bb4bcfd8e1a64d19 2629 cryptsetup_1.7.0-1.dsc
d2afa5b9d974404f9f5ca15cf6b4f018dde65169 1224616 cryptsetup_1.7.0.orig.tar.xz
6091303d68fda430f6c5a903a8be37d4c6807314 84592 cryptsetup_1.7.0-1.debian.tar.xz
28b0f26a906127c069c6ec6566545486a51a5322 107680 cryptsetup-bin-dbgsym_1.7.0-1_amd64.deb
a3bb9b4be89ce472ac7d386d4c482f45e07e57ba 200552 cryptsetup-bin_1.7.0-1_amd64.deb
e12b303cd89353100dacd3708706946a05344089 16354 cryptsetup-dbgsym_1.7.0-1_amd64.deb
53acb9e3c5cbced3bd5b7c80910b1a131298e2ea 37366 cryptsetup-udeb_1.7.0-1_amd64.udeb
94a2004b411058400c8ac7e0766c5242558d13d7 164220 cryptsetup_1.7.0-1_amd64.deb
45038c373dc220e47055037ff17aa2bc8b888a78 50872 libcryptsetup-dev_1.7.0-1_amd64.deb
dd54f128f7597d9779b4548f2d7023dd481d4901 169502 libcryptsetup4-dbgsym_1.7.0-1_amd64.deb
3686881b7c25e3525717a7751a18846c669fcd06 66162 libcryptsetup4-udeb_1.7.0-1_amd64.udeb
3392f65bf146857c33475192a13e6bfdd1f267b9 105090 libcryptsetup4_1.7.0-1_amd64.deb
Checksums-Sha256:
0e98402b75f4a8294fbec39a8d45867b836574ff9e957ad250e445c6236e09fc 2629 cryptsetup_1.7.0-1.dsc
075524a7cc0db36d12119fa79116750accb1c6c8825d5faa2534b74b8ce3d148 1224616 cryptsetup_1.7.0.orig.tar.xz
da833f8cfe94bcefc3350d5ce468bbbeda23a081aa9ebd13b29f9c1c348e4083 84592 cryptsetup_1.7.0-1.debian.tar.xz
6f02aea5abc662d7b10926fb323ac2d6d57cfc77b1f0870b03688bddff64b7a1 107680 cryptsetup-bin-dbgsym_1.7.0-1_amd64.deb
ae6e92820f5e01641ecafebe91a8cb1161bb1af217828a9a4702aca8c81cc524 200552 cryptsetup-bin_1.7.0-1_amd64.deb
7b84434213827e04b43ba50080cd35e9feb22a24e95978b1efae61761dcd0da5 16354 cryptsetup-dbgsym_1.7.0-1_amd64.deb
799c7168b50efec354d02519ce41d8218a44c3fa50a8016daaf042e7065b289f 37366 cryptsetup-udeb_1.7.0-1_amd64.udeb
b9444da4a6fea3827fc444f3dd00a455d1acfb0ce3c9941219e078ef0399945e 164220 cryptsetup_1.7.0-1_amd64.deb
ba557dd536070dc01243477022c47add0e412d331d3bb68620819a8468317b59 50872 libcryptsetup-dev_1.7.0-1_amd64.deb
b20975f7de7439fdea5f8fffb6982e8629d88e19826494595d48278b0b15347d 169502 libcryptsetup4-dbgsym_1.7.0-1_amd64.deb
f296b8f4437caf29e99db540904664ef97ddca8b336641a5699ad0298a24f699 66162 libcryptsetup4-udeb_1.7.0-1_amd64.udeb
18496ea7a65df2879229bd42df009abc67f48a8bf39e24f3f66d96c6c8a1714d 105090 libcryptsetup4_1.7.0-1_amd64.deb
Files:
7c7ae049b58a6370294f939afc44b10f 2629 admin optional cryptsetup_1.7.0-1.dsc
56c385fe87fc2b6873df4b7f89202d0f 1224616 admin optional cryptsetup_1.7.0.orig.tar.xz
2bb6fd0024729c9270f6e5bc01d847d9 84592 admin optional cryptsetup_1.7.0-1.debian.tar.xz
fb52192e6fa4009e0a7c5082dd9927f4 107680 debug extra cryptsetup-bin-dbgsym_1.7.0-1_amd64.deb
19033671d253a07b606d88613e7a5246 200552 admin optional cryptsetup-bin_1.7.0-1_amd64.deb
216c02f83aedd48ae46c6bc5a527f5e6 16354 debug extra cryptsetup-dbgsym_1.7.0-1_amd64.deb
5bd4d3a615c276a4f84923fd6fa3d1e7 37366 debian-installer optional cryptsetup-udeb_1.7.0-1_amd64.udeb
a1acd621079c114221e7e4aa0d6271ca 164220 admin optional cryptsetup_1.7.0-1_amd64.deb
c508799d018bb22c02ab8ed5dd802ed8 50872 libdevel optional libcryptsetup-dev_1.7.0-1_amd64.deb
4dde01ca1106d801aed0e3dfb556368d 169502 debug extra libcryptsetup4-dbgsym_1.7.0-1_amd64.deb
eebd35b2eee3b61abbb5e42a71fc9100 66162 debian-installer optional libcryptsetup4-udeb_1.7.0-1_amd64.udeb
c2f51b564edd3f175ba0b7fceb984d15 105090 libs optional libcryptsetup4_1.7.0-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=yUwG
-----END PGP SIGNATURE-----