[ANNOUNCE] cryptsetup 2.3.7 (CVE-2021-4122 fix)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8920303346705367814==
Content-Language: en-US
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------1H0FYWuBC1ghH09K2RkE0d0J"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------1H0FYWuBC1ghH09K2RkE0d0J
Content-Type: multipart/mixed; boundary="------------k0KxPnUwlGxuRL3UDp0bO0GH";
 protected-headers="v1"
From: Milan Broz <[email protected]>
To: dm-crypt <[email protected]>
Message-ID: <432240a8-bd83-4135-b245-015b0007410b-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Subject: [ANNOUNCE] cryptsetup 2.3.7 (CVE-2021-4122 fix)

--------------k0KxPnUwlGxuRL3UDp0bO0GH
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64

VGhlIGNyeXB0c2V0dXAgMi4zLjcgc3RhYmxlIHJlbGVhc2UgaXMgYXZhaWxhYmxlIGF0DQoN
CiAgICAgICBodHRwczovL2dpdGxhYi5jb20vY3J5cHRzZXR1cC9jcnlwdHNldHVwDQoNClBs
ZWFzZSBub3RlIHRoYXQgcmVsZWFzZSBwYWNrYWdlcyBhcmUgbG9jYXRlZCBvbiBrZXJuZWwu
b3JnDQoNCiAgICAgICBodHRwczovL3d3dy5rZXJuZWwub3JnL3B1Yi9saW51eC91dGlscy9j
cnlwdHNldHVwL3YyLjMvDQoNCkZlZWRiYWNrIGFuZCBidWcgcmVwb3J0cyBhcmUgd2VsY29t
ZWQuDQoNCkNyeXB0c2V0dXAgMi4zLjcgUmVsZWFzZSBOb3Rlcw0KPT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09DQpTdGFibGUgc2VjdXJpdHkgYnVnLWZpeCByZWxlYXNlIHRoYXQg
Zml4ZXMgQ1ZFLTIwMjEtNDEyMi4NCg0KQWxsIHVzZXJzIG9mIGNyeXB0c2V0dXAgMi4zLngg
bXVzdCB1cGdyYWRlIHRvIHRoaXMgdmVyc2lvbi4NCg0KQ2hhbmdlcyBzaW5jZSB2ZXJzaW9u
IDIuMy42DQp+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn4NCg0KKiBGaXggcG9zc2libGUg
YXR0YWNrcyBhZ2FpbnN0IGRhdGEgY29uZmlkZW50aWFsaXR5IHRocm91Z2ggTFVLUzIgb25s
aW5lDQogICByZWVuY3J5cHRpb24gZXh0ZW5zaW9uIGNyYXNoIHJlY292ZXJ5IChDVkUtMjAy
MS00MTIyKS4NCg0KICAgQW4gYXR0YWNrZXIgY2FuIG1vZGlmeSBvbi1kaXNrIG1ldGFkYXRh
IHRvIHNpbXVsYXRlIGRlY3J5cHRpb24gaW4NCiAgIHByb2dyZXNzIHdpdGggY3Jhc2hlZCAo
dW5maW5pc2hlZCkgcmVlbmNyeXB0aW9uIHN0ZXAgYW5kIHBlcnNpc3RlbnRseQ0KICAgZGVj
cnlwdCBwYXJ0IG9mIHRoZSBMVUtTIGRldmljZS4NCg0KICAgVGhpcyBhdHRhY2sgcmVxdWly
ZXMgcmVwZWF0ZWQgcGh5c2ljYWwgYWNjZXNzIHRvIHRoZSBMVUtTIGRldmljZSBidXQNCiAg
IG5vIGtub3dsZWRnZSBvZiB1c2VyIHBhc3NwaHJhc2VzLg0KDQogICBUaGUgZGVjcnlwdGlv
biBzdGVwIGlzIHBlcmZvcm1lZCBhZnRlciBhIHZhbGlkIHVzZXIgYWN0aXZhdGVzDQogICB0
aGUgZGV2aWNlIHdpdGggYSBjb3JyZWN0IHBhc3NwaHJhc2UgYW5kIG1vZGlmaWVkIG1ldGFk
YXRhLg0KICAgVGhlcmUgYXJlIG5vIHZpc2libGUgd2FybmluZ3MgZm9yIHRoZSB1c2VyIHRo
YXQgc3VjaCByZWNvdmVyeSBoYXBwZW5lZA0KICAgKGV4Y2VwdCB1c2luZyB0aGUgbHVrc0R1
bXAgY29tbWFuZCkuIFRoZSBhdHRhY2sgY2FuIGFsc28gYmUgcmV2ZXJzZWQNCiAgIGFmdGVy
d2FyZCAoc2ltdWxhdGluZyBjcmFzaGVkIGVuY3J5cHRpb24gZnJvbSBhIHBsYWludGV4dCkg
d2l0aA0KICAgcG9zc2libGUgbW9kaWZpY2F0aW9uIG9mIHJldmVhbGVkIHBsYWludGV4dC4N
Cg0KICAgVGhlIHNpemUgb2YgcG9zc2libGUgZGVjcnlwdGVkIGRhdGEgZGVwZW5kcyBvbiBj
b25maWd1cmVkIExVS1MyIGhlYWRlcg0KICAgc2l6ZSAobWV0YWRhdGEgc2l6ZSBpcyBjb25m
aWd1cmFibGUgZm9yIExVS1MyKS4NCiAgIFdpdGggdGhlIGRlZmF1bHQgcGFyYW1ldGVycyAo
MTYgTWlCIExVS1MyIGhlYWRlcikgYW5kIG9ubHkgb25lDQogICBhbGxvY2F0ZWQga2V5c2xv
dCAoNTEyIGJpdCBrZXkgZm9yIEFFUy1YVFMpLCBzaW11bGF0ZWQgZGVjcnlwdGlvbiB3aXRo
DQogICBjaGVja3N1bSByZXNpbGllbmNlIFNIQTEgKDIwIGJ5dGVzIGNoZWNrc3VtIGZvciA0
MDk2LWJ5dGUgYmxvY2tzKSwNCiAgIHRoZSBtYXhpbWFsIGRlY3J5cHRlZCBzaXplIGNhbiBi
ZSBvdmVyIDNHaUIuDQoNCiAgIFRoZSBhdHRhY2sgaXMgbm90IGFwcGxpY2FibGUgdG8gTFVL
UzEgZm9ybWF0LCBidXQgdGhlIGF0dGFja2VyIGNhbg0KICAgdXBkYXRlIG1ldGFkYXRhIGlu
IHBsYWNlIHRvIExVS1MyIGZvcm1hdCBhcyBhbiBhZGRpdGlvbmFsIHN0ZXAuDQogICBGb3Ig
c3VjaCBhIGNvbnZlcnRlZCBMVUtTMiBoZWFkZXIsIHRoZSBrZXlzbG90IGFyZWEgaXMgbGlt
aXRlZCB0bw0KICAgZGVjcnlwdGVkIHNpemUgKHdpdGggU0hBMSBjaGVja3N1bXMpIG92ZXIg
MzAwIE1pQi4NCg0KICAgVGhlIGlzc3VlIGlzIHByZXNlbnQgaW4gYWxsIGNyeXB0c2V0dXAg
cmVsZWFzZXMgc2luY2UgMi4yLjAuDQogICBWZXJzaW9ucyAxLngsIDIuMC54LCBhbmQgMi4x
LnggYXJlIG5vdCBhZmZlY3RlZCwgYXMgdGhlc2UgZG8gbm90DQogICBjb250YWluIExVS1My
IHJlZW5jcnlwdGlvbiBleHRlbnNpb24uDQoNCiAgIFRoZSBwcm9ibGVtIHdhcyBjYXVzZWQg
YnkgcmV1c2luZyBhIG1lY2hhbmlzbSBkZXNpZ25lZCBmb3IgYWN0dWFsDQogICByZWVuY3J5
cHRpb24gb3BlcmF0aW9uIHdpdGhvdXQgcmVhc3Nlc3NpbmcgdGhlIHNlY3VyaXR5IGltcGFj
dCBmb3IgbmV3DQogICBlbmNyeXB0aW9uIGFuZCBkZWNyeXB0aW9uIG9wZXJhdGlvbnMuIFdo
aWxlIHRoZSByZWVuY3J5cHRpb24gcmVxdWlyZXMNCiAgIGNhbGN1bGF0aW5nIGFuZCB2ZXJp
ZnlpbmcgYm90aCBrZXkgZGlnZXN0cywgbm8gZGlnZXN0IHdhcyBuZWVkZWQgdG8NCiAgIGlu
aXRpYXRlIGRlY3J5cHRpb24gcmVjb3ZlcnkgaWYgdGhlIGRlc3RpbmF0aW9uIGlzIHBsYWlu
dGV4dCAobm8NCiAgIGVuY3J5cHRpb24ga2V5KS4gQWxzbywgc29tZSBtZXRhZGF0YSAobGlr
ZSBlbmNyeXB0aW9uIGNpcGhlcikgaXMgbm90DQogICBwcm90ZWN0ZWQsIGFuZCBhbiBhdHRh
Y2tlciBjb3VsZCBjaGFuZ2UgaXQuIE5vdGUgdGhhdCBMVUtTMiBwcm90ZWN0cw0KICAgdmlz
aWJsZSBtZXRhZGF0YSBvbmx5IHdoZW4gYSByYW5kb20gY2hhbmdlIG9jY3Vycy4gSXQgZG9l
cyBub3QgcHJvdGVjdA0KICAgYWdhaW5zdCBpbnRlbnRpb25hbCBtb2RpZmljYXRpb24gYnV0
IHN1Y2ggbW9kaWZpY2F0aW9uIG11c3Qgbm90IGNhdXNlDQogICBhIHZpb2xhdGlvbiBvZiBk
YXRhIGNvbmZpZGVudGlhbGl0eS4NCg0KICAgVGhlIGZpeCBpbnRyb2R1Y2VzIGFkZGl0aW9u
YWwgZGlnZXN0IHByb3RlY3Rpb24gb2YgcmVlbmNyeXB0aW9uDQogICBtZXRhZGF0YS4gVGhl
IGRpZ2VzdCBpcyBjYWxjdWxhdGVkIGZyb20ga25vd24ga2V5cyBhbmQgY3JpdGljYWwNCiAg
IHJlZW5jcnlwdGlvbiBtZXRhZGF0YS4gTm93IGFuIGF0dGFja2VyIGNhbm5vdCBjcmVhdGUg
Y29ycmVjdCBtZXRhZGF0YQ0KICAgZGlnZXN0IHdpdGhvdXQga25vd2xlZGdlIG9mIGEgcGFz
c3BocmFzZSBmb3IgdXNlZCBrZXlzbG90cy4NCiAgIEZvciBtb3JlIGRldGFpbHMsIHNlZSBM
VUtTMiBPbi1EaXNrIEZvcm1hdCBTcGVjaWZpY2F0aW9uIHZlcnNpb24gMS4xLjAuDQoNCiAg
IFRoZSBmb3JtZXIgcmVlbmNyeXB0aW9uIG9wZXJhdGlvbiAod2l0aG91dCB0aGUgYWRkaXRp
b25hbCBkaWdlc3QpIGlzIG5vDQogICBsb25nZXIgc3VwcG9ydGVkIChyZWVuY3J5cHRpb24g
d2l0aCB0aGUgZGlnZXN0IGlzIG5vdCBiYWNrd2FyZA0KICAgY29tcGF0aWJsZSkuIFlvdSBu
ZWVkIHRvIGZpbmlzaCBpbi1wcm9ncmVzcyByZWVuY3J5cHRpb24gYmVmb3JlDQogICB1cGRh
dGluZyB0byBuZXcgcGFja2FnZXMuIFRoZSBhbHRlcm5hdGl2ZSBhcHByb2FjaCBpcyB0byBw
ZXJmb3JtDQogICBhIHJlcGFpciBjb21tYW5kIGZyb20gdGhlIHVwZGF0ZWQgcGFja2FnZSB0
byByZWNhbGN1bGF0ZSByZWVuY3J5cHRpb24NCiAgIGRpZ2VzdCBhbmQgZml4IG1ldGFkYXRh
Lg0KICAgVGhlIHJlZW5jcnlwdGlvbiByZXBhaXIgb3BlcmF0aW9uIGFsd2F5cyByZXF1aXJl
IGEgdXNlciBwYXNzcGhyYXNlLg0KDQogICBXQVJOSU5HOiBEZXZpY2VzIHdpdGggb2xkZXIg
cmVlbmNyeXB0aW9uIGluIHByb2dyZXNzIGNhbiBiZSBubyBsb25nZXINCiAgIGFjdGl2YXRl
ZCB3aXRob3V0IHBlcmZvcm1pbmcgdGhlIGFjdGlvbiBtZW50aW9uZWQgYWJvdmUuDQoNCiAg
IEVuY3J5cHRpb24gaW4gcHJvZ3Jlc3MgY2FuIGJlIGRldGVjdGVkIGJ5IHJ1bm5pbmcgdGhl
IGx1a3NEdW1wIGNvbW1hbmQNCiAgIChvdXRwdXQgaW5jbHVkZXMgcmVlbmNyeXB0IGtleXNs
b3Qgd2l0aCByZWVuY3J5cHRpb24gcGFyYW1ldGVycykuIEFsc28sDQogICBkdXJpbmcgdGhl
IGFjdGl2ZSByZWVuY3J5cHRpb24sIG5vIGtleXNsb3Qgb3BlcmF0aW9ucyBhcmUgYXZhaWxh
YmxlDQogICAoY2hhbmdlIG9mIHBhc3NwaHJhc2VzLCBldGMuKS4NCg0KICAgVGhlIGlzc3Vl
IHdhcyBmb3VuZCBieSBNaWxhbiBCcm96IGFzIGNyeXB0c2V0dXAgbWFpbnRhaW5lci4NCg0K
T3RoZXIgY2hhbmdlcw0Kfn5+fn5+fn5+fn5+fg0KKiBBZGQgY29uZmlndXJlIG9wdGlvbiAt
LWRpc2FibGUtbHVrczItcmVlbmNyeXB0aW9uIHRvIGNvbXBsZXRlbHkgZGlzYWJsZQ0KICAg
TFVLUzIgcmVlbmNyeXB0aW9uIGNvZGUuDQoNCiAgIFdoZW4gdXNlZCwgdGhlIGxpYmNyeXB0
c2V0dXAgbGlicmFyeSBjYW4gcmVhZCBtZXRhZGF0YSB3aXRoDQogICByZWVuY3J5cHRpb24g
Y29kZSwgYnV0IGFsbCByZWVuY3J5cHRpb24gQVBJIGNhbGxzIGFuZCBjcnlwdHNldHVwDQog
ICByZWVuY3J5cHQgY29tbWFuZHMgYXJlIGRpc2FibGVkLg0KDQogICBEZXZpY2VzIHdpdGgg
b25saW5lIHJlZW5jcnlwdGlvbiBpbiBwcm9ncmVzcyBjYW5ub3QgYmUgYWN0aXZhdGVkLg0K
ICAgVGhpcyBvcHRpb24gY2FuIGNhdXNlIHNvbWUgaW5jb21wYXRpYmlsaXRpZXMuIFBsZWFz
ZSB1c2Ugd2l0aCBjYXJlLg0KDQoqIEltcHJvdmUgaW50ZXJuYWwgbWV0YWRhdGEgdmFsaWRh
dGlvbiBjb2RlIGZvciByZWVuY3J5cHRpb24gbWV0YWRhdGEuDQoNCiogQWRkIHVwZGF0ZWQg
ZG9jdW1lbnRhdGlvbiBmb3IgTFVLUzIgT24tRGlzayBGb3JtYXQgU3BlY2lmaWNhdGlvbg0K
ICAgdmVyc2lvbiAxLjEuMCAod2l0aCByZWVuY3J5cHRpb24gZXh0ZW5zaW9uIGRlc2NyaXB0
aW9uIGFuZCB1cGRhdGVkDQogICBtZXRhZGF0YSBkZXNjcmlwdGlvbikuIFNlZSBkb2NzL29u
LWRpc2stZm9ybWF0LWx1a3MyLnBkZiBvciBvbmxpbmUNCiAgIHZlcnNpb24gaW4gaHR0cHM6
Ly9naXRsYWIuY29tL2NyeXB0c2V0dXAvTFVLUzItZG9jcyByZXBvc2l0b3J5Lg0K

--------------k0KxPnUwlGxuRL3UDp0bO0GH--

--------------1H0FYWuBC1ghH09K2RkE0d0J
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmHf+V4ACgkQ2bBXe9k+
mPyLdxAAj40Z3O7EEI++JF3yorxmmJnmVMPSDZ3/a3QxtRWItWdqVp9K1ucwi8zr
1/W0noIUI5DgTlSUdvl2BU8z09hjS0JUmLJorEyPtUjUbheGOqqO8JHaB8lTQM5t
NQuP/qPx+pmgD3qDS1YoDGnsWPRDneiiyAM1gfp7f/J13yb3mxfzNLnwxmmBiv2h
0aDwdTkAGWoXB4EjChq/Q5q6q3E/u5QgV8K06r8yOnaEUiupAPvKifZWKVVJXqzs
jrRiTzTm9Mr78019/HVgYtVWMch8ERyUeZcb5XGjNCKfmZ9OjhpbcdqqARTHl1Mb
oWQZgweOWBtsFDcUpjJyQruKbpCjVq4Ii9sGJvPJjCkjcSvTEXA2xpNCB/Aqe1OQ
9JXU1h+KjGYBoPAxjtwrf7Ejh9BvbiUhXPKUh711JSloDHUtIho+tj4YByzW3z+o
dKymqvjuHPiCLFOId8SepnmZoWy9nn4piOm+vkDyUpomnBennWjso01fY7DBhojj
Mc9fKWkmlLjIKC9SGHGsMRfb3NlMWZNJoKv+ZPkwx9iofD4MK56d/TCzeTRJdyTO
OHgaMcDpGi7Dka3GDSYeBsBJSBHoZtf8jlt4gffb1uMKi9qdP6G72xWGgyqbnUv9
hPoDZUmU8fFZsLcHo8qZI3g0IQQn+WcDw49Tq3i2lehq+tkOWrI=
=3NDi
-----END PGP SIGNATURE-----

--------------1H0FYWuBC1ghH09K2RkE0d0J--

--===============8920303346705367814==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]

--===============8920303346705367814==--