Re: cryptsetup 2.4.3 (CVE-2021-4122 fix)
Ondrej Kozina <[email protected]> Fri, 14 Jan 2022 12:18:46 +0100
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
SGkgQ2hyaXN0b3BoLA0KDQoNCk9uIDEzLiAwMS4gMjIgMTk6MjQsIENocmlzdG9waCBBbnRvbiBN aXR0ZXJlciB3cm90ZToNCj4gSGV5Lg0KPiANCj4gDQo+IE9uIFRodSwgMjAyMi0wMS0xMyBhdCAx MTowNSArMDEwMCwgTWlsYW4gQnJveiB3cm90ZToNCj4+ICDCoMKgIEFuIGF0dGFja2VyIGNhbiBt b2RpZnkgb24tZGlzayBtZXRhZGF0YSB0byBzaW11bGF0ZSBkZWNyeXB0aW9uIGluDQo+PiAgwqDC oCBwcm9ncmVzcyB3aXRoIGNyYXNoZWQgKHVuZmluaXNoZWQpIHJlZW5jcnlwdGlvbiBzdGVwIGFu ZA0KPj4gcGVyc2lzdGVudGx5DQo+PiAgwqDCoCBkZWNyeXB0IHBhcnQgb2YgdGhlIExVS1MgZGV2 aWNlLg0KPiANCj4gSnVzdCBmb3IgbXkgdW5kZXJzdGFuZGluZy4uLg0KPiANCj4gMSkgV291bGRu J3QgdGhhdCB0aGVuIGNhdXNlIGNvbXBsZXRlIGRlY3J5cHRpb24/IEkuZS4gY3J5cHRzZXR1cCBz ZWVzDQo+IHRoYXQgcmUtZW5jcnlwdCAodG8gcGxhaW4gdGV4dCkgd2FzIGFsbGVnZWRseSBhYm9y dGVkIGF0IGJsb2NrIFhZWi4uLg0KPiBhbmQgdGhlbiByZS1lbmNyeXB0cyAodG8gcGxhaW4gdGV4 dCkgZnJvbSB0aGVyZSBvbiB0aGUgd2hvbGUgZGV2aWNlPw0KDQpOb3Qgd2l0aG91dCB1c2VyIG1h bnVhbCBpbnRlcnZlbnRpb24uIEN1cnJlbnRseSwgdGhlIHJlZW5jcnlwdGlvbiANCm9wZXJhdGlv biBjYW4gbm90IGJlIHJlc3VtZWQgdW5sZXNzIHVzZXIgZGlyZWN0bHkgaXNzdWUgImNyeXB0c2V0 dXAgDQpyZWVuY3J5cHQiIGNvbW1hbmQgKGFwcGxpZXMgdG8gYm90aCBmaXhlZCBhbmQgdnVsbmVy YWJsZSBjcnlwdHNldHVwcykuIA0KQW5kIGl0IHdvdWxkIHJlcXVpcmUgdXNlciB0byBwcm92aWRl IHByb3BlciBwYXNzcGhyYXNlLiBTaW5jZSBpdCANCnJlcXVpcmVzIHVzZXIncyBtYW51YWwgaW5w dXQgaXQgZ2l2ZXMgdXNlciBhbHNvIHNwYWNlIHRvIHZlcmlmeSB0aGUgDQpzdGF0ZSBvZiBMVUtT MiBtZXRhZGF0YSB3aXRoIGUuZy4gbHVrc0R1bXAgY29tbWFuZCBiZWZvcmUgdHJpZ2dlcmluZyB0 aGUgDQpjb21tYW5kLg0KDQpPbiB0aGUgb3RoZXIgaGFuZCwgdGhlIHZ1bG5lcmFiaWxpdHkgcHJp bWFyaWx5IHRhcmdldHMgTFVLUzIgDQpyZWVuY3J5cHRpb24gYXV0by1yZWNvdmVyeSBmZWF0dXJl LiBBdXRvLXJlY292ZXJ5IHRha2VzIHBsYWNlIGluIHR3byANCnNjZW5hcmlvczoNCg0KYSkgY3J5 cHRzZXR1cCByZXBhaXIgY29tbWFuZCAoYWdhaW4gbWFudWFsIGludGVydmVudGlvbiB3aXRoIGlu dGVyYWN0aXZlIA0KcXVlcnkgYW5kIHBhc3NwaHJhc2UgcHJvbXB0KQ0KDQpiKSBMVUtTMiBkZXZp Y2UgYWN0aXZhdGlvbiBlLmcuIGR1cmluZyBzeXN0ZW0gYm9vdC4NCg0KTGV0J3MgZm9jdXMgb24g YikgYSBsaXR0bGU6DQoNClRoZSBMVUtTMiByZWVuY3J5cHRpb24gd2FzIGRlc2lnbmVkIGluIGEg d2F5IHRoYXQgZXZlbiBpZiB0aGUgb3BlcmF0aW9uIA0KaXMgaW50ZXJydXB0ZWQgZm9yY2VmdWxs eSAoc3lzdGVtIGNyYXNoL3Bvd2VyIGZhaWx1cmUpIHRoZSBzeXN0ZW0gc2hvdWxkIA0KYmUgYWJs ZSB0byByZWNvdmVyIGZyb20gaXQgYXV0b21hdGljYWxseS4gU28gdGhlIHJlY292ZXJ5IGZyb20g DQpyZWVuY3J5cHRpb24gY3Jhc2ggaXMgc2VhbWxlc3MgcHJvdmlkZWQgdXNlciBrbm93cyBwYXNz cGhyYXNlLg0KDQpJbiBjb3JuZXIgY2FzZSwgd2hlbiBkZXZpY2UgaXMgc21hbGwgZW5vdWdoIHRv IGZpdCBsaW1pdHMgZGlzY2xvc2VkIGluIA0KdGhlIHZ1bG5lcmFiaWxpdHkgcmVwb3J0IChhbmQg TFVLUzIgc3BhcmUgbWV0YWRhdGEgc3BhY2UgYWxsb3dzIGl0KSB0aGUgDQogIGF1dG8tcmVjb3Zl cnkgbWF5IGFjdHVhbGx5IGZpbmlzaCB0aGUgZGVjcnlwdGlvbiBwcm9jZXNzIChpbiBvbmUgc3Rl cCkuDQoNCj4gDQo+IDIpIEFuZCBzaG91bGRuJ3QgdGhhdCBmYWlsIHRoZW4gbmV4dCB0aW1lLCB0 aGUgZGV2aWNlIGlzIG9wZW5lZD8NCg0KT25seSBpZiB1c2VyIHdpbGxpbmdseSByZXN1bWVzIHJl ZW5jcnlwdGlvbiBvciBpbiBjb3JuZXIgY2FzZSBkZXNjcmliZWQgDQphYm92ZS4gWWVzIGluIHRo YXQgY2FzZSB0aGUgZGV2aWNlIGFjdGl2YXRpb24gd291bGQgZmFpbCBiZWNhdXNlIHRoZXJlIA0K YXJlIG5vIFZLIHN0b3JlZCBpbiByZW1haW5pbmcgTFVLUzIgaGVhZGVyIHN0dWIuDQoNCkFueXdh eSwgYW4gYXR0YWNrZXIgY291bGQgZWFzaWx5IGF2b2lkIHRoaXMgc2NlbmFyaW8gYnV0IGZvcmdp bmcgdGhlIA0KTFVLUzIgbWV0YWRhdGEgaW4gYSB3YXkgdGhhdCBhdCBsZWFzdCBzaW5nbGUgc2Vj dG9yIHJlbWFpbnMgZW5jcnlwdGVkLg0KDQoNCj4gRWl0aGVyIGJlY2F1c2UgaXQgd2FzIGNvbXBs ZXRlbHkgdHJhbnNmb3JtZWQgdG8gcGxhaW4gdGV4dCwgd2hpbGUgc29tZQ0KPiBlbmNyeXB0aW9u IGlzIGV4cGVjdGVkLi4uDQoNCmFib3ZlDQoNCm9yIGJlY2F1c2UgYW4gYXR0YWNrIHN0YXJ0ZWQg b25seSBlLmcuIGF0DQo+IGhhbGYgbyB0aGUgYmxvY2tzLCBidXQgdGhlbiBvbmUgaGFsZiBpcyBl bmNyeXB0ZWQgYW5kIHRoZSBvdGhlciBub3Q/DQoNCk5vcGUsIGluIHRoaXMgY2FzZSBkZXZpY2Ug d291bGQgYWN0aXZhdGUganVzdCBmaW5lLCBwYXJ0IG9mIHRoZSBkZXZpY2UgDQplbmNyeXB0ZWQg YW5kIHBhcnQgcGxhaW50ZXh0IChtdWx0aSBzZWdtZW50IGRldmljZS1tYXBwZXIgZGV2aWNlKS4g DQpPdGhlcndpc2Ugd2Ugd291bGQgYmUgdW5hYmxlIHRvIGFjdGl2YXRlIHBhcnRpYWxseSBkZWNy eXB0ZWQgZGV2aWNlcyBkdWUgDQp0byBpbnRlcnJ1cHRpb24uIFNhbWUgYXBwbGllcyB0byBkZXZp Y2VzIGluIGVuY3J5cHRpb24gb3IgcmVlbmNyeXB0aW9uLg0KDQo+IA0KPiAzKSBXb3VsZCBpdCBh bHNvIGhhdmUgYmVlbiBwb3NzaWJsZSwgdG8gcmUtZW5jcnlwdCB3aXRoIGFub3RoZXIga2V5Pw0K ICBJbg0KPiBvdGhlciB3b3JkcywgaXMgdGhlIG5ldyBrZXkgd3JpdHRlbiB0byBzb21lIGV4dHJh IGhlYWRlciBhcmVhLi4uIG9yIGlzDQo+IGl0IHJhdGhlciBqdXN0IHNvbWUgbmV3IGtleXNsb3Qs IGVuY3J5cHRlZCB3aXRoIGEgcGFzc3BocmFzZSwgYW5kIHRodXMNCj4gdGhhdCB3b3VsZCBoYXZl IGJlZW4gKGhvcGVmdWxseSkgbm90aWNlZCB3aGVuICJyZXN1bWluZyIgcmUtZW5jcnlwdGlvbiwN Cj4gYW5kIHRoZSBwYXNzcGhyYXNlIGRvZXNuJ3QgbWF0Y2ggKHJlc3BlY3RpdmVseSB0aGUgbGVn aXQgdXNlciBjYW5ub3QNCj4gdW5sb2NrIHRoZSBrZXlsc2xvdCk/DQoNClJhbnNvbXdhcmUgYXR0 YWNrIGlzIG5vdCBwb3NzaWJsZSBwcm92aWRlZCBhdHRhY2tlciBkb2VzIG5vdCBrbm93IHZhbGlk IA0KcGFzc3BocmFzZSBvciBWSywgaWYgdGhhdCdzIHdoYXQgeW91J3JlIGFza2luZzoNCg0KWWVz LCBhdHRhY2tlciBjYW4gYWRkIG5ldyB1bmJvdW5kIExVS1MyIGtleXNsb3QgKHdpdGgga2V5IG5v dCBhc3NpZ25lZCANCnRvIGN1cnJlbnQgZW5jcnlwdGVkIHNlZ21lbnQpLCBidXQgaGUgZG9lcyBu b3Qga25vdyBwcm9wZXIgcGFzc3BocmFzZSANCihQX09LKSB0byBvbmUgb2YgZXhpc3Rpbmcga2V5 c2xvdHMgKHdpdGggdmFsaWQgVkspLiBTbyB0aGUga2V5c2xvdCBpcyANCnByb3RlY3RlZCBieSBk aWZmZXJlbnQgcGFzc3BocmFzZSBQX1guDQoNClNvIGF0dGFja2VyIGNhbiBmb3JnZSBzdWNoIExV S1MyIG1ldGFkYXRhLCBhZGQgbmV3IExVS1MyIGtleXNsb3QgYnV0IHRoZSANCmF0dGFjayBpdHNl bGYgd291bGQgbm90IHRyaWdnZXIgcHJvcGVybHkgZHVyaW5nIGF1dG8tcmVjb3Zlcnkgb3IgZXZl biANCm1hbnVhbCBjcnlwdHNldHVwIHJlZW5jcnlwdCBjb21tYW5kLiBSZWVuY3J5cHRpb24gcmVx dWlyZXMgYWxsIG5lY2Vzc2FyeSANClZLcyB1bmxvY2tlZCB0byBwcm9wZXJseSByZXN1bWUgb3Ig cGVyZm9ybSByZWNvdmVyeS4NCg0KPiANCj4gDQo+PiAgwqDCoCBUaGUgYXR0YWNrIGlzIG5vdCBh cHBsaWNhYmxlIHRvIExVS1MxIGZvcm1hdCwgYnV0IHRoZSBhdHRhY2tlciBjYW4NCj4+ICDCoMKg IHVwZGF0ZSBtZXRhZGF0YSBpbiBwbGFjZSB0byBMVUtTMiBmb3JtYXQgYXMgYW4gYWRkaXRpb25h bCBzdGVwLg0KPiANCj4gU2hvdWxuJ3QgImFsbCIgKGF0IGxlYXN0IGFzIGZhciBhcyBwb3NzaWJs ZSkgb2YgdGhlIGhlYWRlciBiZSBzZWN1cmVkDQo+IGJ5IHNvbWUgTUFDIG9yIHNvLCBzbyB0aGF0 IGNyeXB0c2V0dXAgd291bGQgYWJvcnQgYmVmb3JlIG9wZW5pbmcsIHdoZW4NCj4gc29tZXRoaW5n IHNlZW1zIGZpc2h5Pw0KDQpUaGF0IHdvdWxkIG5vdCBiZSBwb3NzaWJsZSB3aXRoIExVS1MyIGZv cm1hdCwgb3IgYmV0dGVyIHNheSB3aXRoIGN1cnJlbnQgDQp2ZXJzaW9uIG9mIEFQSSBvZiBsaWJj cnlwdHNldHVwLiBJZiB0aGUgd2hvbGUgaGVhZGVyIHdhcyB0byBiZSBwcm90ZWN0ZWQgDQpieSBN QUMgaXQgd291bGQgcmVxdWlyZSBjb21wbGV0ZSByZXdvcmsgb2YgQVBJIHdoaWNoIHdvdWxkIG5v dCBiZSANCmJhY2t3YXJkIGNvbXBhdGlibGUuIEl0IHdvdWxkIHByb2JhYmx5IGJlIExVS1MzIGZv cm1hdC9saWJyYXJ5Lg0KDQpBbHNvLCBqdXN0IGZvciBMVUtTMiByZWVuY3J5cHRpb24sIGl0IHdv dWxkIGNvbXBsZXRlbHkga2lsbCB0aGUgDQpwZXJmb3JtYW5jZSBvZiB0aGUgb3BlcmF0aW9uLiBE dXJpbmcgTFVLUzIgcmVlbmNyeXB0aW9uIHRoZSBqc29uIA0KbWV0YWRhdGEgYXJlYSBnZXRzIHVw ZGF0ZWQgcXVpdGUgb2Z0ZW4gKHR3aWNlIHBlciBzaW5nbGUgcmVlbmNyeXB0aW9uIA0Kc3RlcCB3 aGljaCBpcyB0eXBpY2FsbHkgfjEwME1pQnMgb2YgZGF0YSByZWVuY3J5cHRlZWQgd2l0aCBjaGVj a3N1bSANCnJlc2lsaWVuY2UgbW9kZSkuIElmIHdlIGNhbGN1bGF0ZWQgYXV0aGVudGljYXRpb24g ZGlnZXN0ICh0aW1lIGV4cGVuc2l2ZSANCm9wZXJhdGlvbikgaW4gZWFjaCBzdGVwIHR3aWNlIGl0 IHdvdWxkIG5vdCBnbyBmYXN0Lg0KDQpLaW5kIHJlZ2FyZHMNCk9uZHJlag0KDQo+IA0KPiBOb3Qg anVzdCB3aXRoIHJlc3BlY3QgdG8gcmUtZW5jcnlwdGlvbiwgYnV0IGFsc28gZS5nLiB3aGljaCBo ZWFkZXINCj4gdmVyc2lvbiBpcyB1c2VkLCBvciBzZXR0aW5ncyBsaWtlIHdoZXRoZXIgRElTQ0FS RCBzaGFsbCBiZSB1c2VkICh3aGljaA0KPiBtYXkgaGF2ZSBzb21lIHNlY3VyaXR5IGltcGFjdCk/ DQo+IA0KPiANCj4gVGhhbmtzLA0KPiBDaHJpcy4NCj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gZG0tY3J5cHQgbWFpbGluZyBsaXN0IC0tIGRtLWNy eXB0QHNhb3V0LmRlDQo+IFRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gZG0tY3J5cHQt bGVhdmVAc2FvdXQuZGUNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KZG0tY3J5cHQgbWFpbGluZyBsaXN0IC0tIGRtLWNyeXB0QHNhb3V0LmRlClRvIHVu c3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gZG0tY3J5cHQtbGVhdmVAc2FvdXQuZGUK