Re: cryptsetup 2.4.3 (CVE-2021-4122 fix)

Ondrej Kozina <[email protected]> Fri, 14 Jan 2022 12:18:46 +0100
Newsgroups gmane.linux.kernel.device-mapper.dm-crypt
Message-ID <[email protected]>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