diff --git a/SPECS/cryptsetup.spec b/SPECS/cryptsetup.spec index d1b86dc..aedeee3 100644 --- a/SPECS/cryptsetup.spec +++ b/SPECS/cryptsetup.spec @@ -5,7 +5,7 @@ Obsoletes: cryptsetup-python3 Summary: A utility for setting up encrypted disks Name: cryptsetup Version: 2.3.3 -Release: 2%{?dist} +Release: 4%{?dist} License: GPLv2+ and LGPLv2+ Group: Applications/System URL: https://gitlab.com/cryptsetup/cryptsetup @@ -24,6 +24,8 @@ Patch0: %{name}-add-system-library-paths.patch # Remove the patch when (if ever) osci infrastructure gets stable enough Patch1: %{name}-disable-verity-compat-test.patch Patch2: %{name}-2.3.4-luks2-validation-32bit-fix.patch +Patch3: %{name}-2.3.4-fix-crypto-backend-to-properly-handle-ECB-mode.patch +Patch4: %{name}-2.3.5-fix-reencryption-cipher_null.patch %description The cryptsetup package contains a utility for setting up @@ -81,6 +83,8 @@ can be used for offline reencryption of disk in situ. %setup -q -n cryptsetup-%{upstream_version} %patch1 -p1 %patch2 -p1 +%patch3 -p1 +%patch4 -p1 %patch0 -p1 chmod -x misc/dracut_90reencrypt/* @@ -140,6 +144,15 @@ rm -rf %{buildroot}/%{_libdir}/*.la %clean %changelog +* Wed Feb 17 2021 Ondrej Kozina - 2.3.3-4 +- patch: Fix reencryption for custom devices with data segments + set to use cipher_null. +- Resolves: #1927409 + +* Wed Feb 03 2021 Ondrej Kozina - 2.3.3-3 +- patch: Fix crypto backend to properly handle ECB mode. +- Resolves: #1859091 + * Thu Aug 27 2020 Ondrej Kozina - 2.3.3-2 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library.