Re: cryptsetup 2.4.3 (CVE-2021-4122 fix)
Christoph Anton Mitterer <[email protected]> Sat, 15 Jan 2022 05:06:52 +0100
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
T24gRnJpLCAyMDIyLTAxLTE0IGF0IDEyOjE4ICswMTAwLCBPbmRyZWogS296aW5hIHdyb3RlOg0K PiA+IDEpIFdvdWxkbid0IHRoYXQgdGhlbiBjYXVzZSBjb21wbGV0ZSBkZWNyeXB0aW9uPyBJLmUu IGNyeXB0c2V0dXANCj4gPiBzZWVzDQo+ID4gdGhhdCByZS1lbmNyeXB0ICh0byBwbGFpbiB0ZXh0 KSB3YXMgYWxsZWdlZGx5IGFib3J0ZWQgYXQgYmxvY2sNCj4gPiBYWVouLi4NCj4gPiBhbmQgdGhl biByZS1lbmNyeXB0cyAodG8gcGxhaW4gdGV4dCkgZnJvbSB0aGVyZSBvbiB0aGUgd2hvbGUNCj4g PiBkZXZpY2U/DQo+IA0KPiBOb3Qgd2l0aG91dCB1c2VyIG1hbnVhbCBpbnRlcnZlbnRpb24uIEN1 cnJlbnRseSwgdGhlIHJlZW5jcnlwdGlvbiANCj4gb3BlcmF0aW9uIGNhbiBub3QgYmUgcmVzdW1l ZCB1bmxlc3MgdXNlciBkaXJlY3RseSBpc3N1ZSAiY3J5cHRzZXR1cCANCj4gcmVlbmNyeXB0IiBj b21tYW5kIChhcHBsaWVzIHRvIGJvdGggZml4ZWQgYW5kIHZ1bG5lcmFibGUNCj4gY3J5cHRzZXR1 cHMpLiANCg0KVGhlbiBJIGRvbid0IHVuZGVyc3RhbmQgdGhlIGF0dGFjay4uLiBjYXVzZSBpZiB0 IHdvdWxkIGJlIG9ubHkgcmVzdW1lZA0KaWYgb25lIGVudGVycyBhIGNvbW1hbmQgbWFudWFsbHks IHRoZSBhdHRhY2tlZCB1c2VyIHdvdWxkIG5vdGljZT8NCg0KDQoNCg0KPiBPbiB0aGUgb3RoZXIg aGFuZCwgdGhlIHZ1bG5lcmFiaWxpdHkgcHJpbWFyaWx5IHRhcmdldHMgTFVLUzIgDQo+IHJlZW5j cnlwdGlvbiBhdXRvLXJlY292ZXJ5IGZlYXR1cmUuIEF1dG8tcmVjb3ZlcnkgdGFrZXMgcGxhY2Ug aW4gdHdvIA0KPiBzY2VuYXJpb3M6DQouLi4NCj4gYikgTFVLUzIgZGV2aWNlIGFjdGl2YXRpb24g ZS5nLiBkdXJpbmcgc3lzdGVtIGJvb3QuDQoNCk9rYXkgdGhhdCdzIHRoZSBzaXR1YXRpb24gSSd2 ZSBoYWQgbWVhbnQgYmVmb3JlLg0KDQo+IFNvIHRoZSByZWNvdmVyeSBmcm9tIA0KPiByZWVuY3J5 cHRpb24gY3Jhc2ggaXMgc2VhbWxlc3MgcHJvdmlkZWQgdXNlciBrbm93cyBwYXNzcGhyYXNlLg0K DQpBbmQgdGhhdCdzIHRoZSBwb2ludCB3aGVyZSBJJ2QgaGF2ZSBleHBlY3RlZCB0aGUgZnVsbCBk ZWNyeXB0aW9uLCBpLmUuOg0KDQotIGFuIGF0dGFja2VyIG1lc3NlcyB3aXRoIHRoZSBoZWFkZXJz IHdoaWxlIHRoZSBkZXZpY2UgaXMgb2ZmbGluZQ0KLSB0aGUgdXNlciBvcGVucyBpdCAoZS5nLiBv biBuZXh0IGJvb3QpLCBkb2Vzbid0IG5vdGljZSBhbnl0aGluZw0KLSBjcnlwdHNldHVwICJjb250 aW51ZXMiIHNpbGVudGx5LCBidXQgYWN0dWFsbHkgZGVjcnlwdHMNCg0KDQo+IEluIGNvcm5lciBj YXNlLCB3aGVuIGRldmljZSBpcyBzbWFsbCBlbm91Z2ggdG8gZml0IGxpbWl0cyBkaXNjbG9zZWQN Cj4gaW4gDQo+IHRoZSB2dWxuZXJhYmlsaXR5IHJlcG9ydCAoYW5kIExVS1MyIHNwYXJlIG1ldGFk YXRhIHNwYWNlIGFsbG93cyBpdCkNCj4gdGhlIA0KPiDCoCBhdXRvLXJlY292ZXJ5IG1heSBhY3R1 YWxseSBmaW5pc2ggdGhlIGRlY3J5cHRpb24gcHJvY2VzcyAoaW4gb25lDQo+IHN0ZXApLg0KDQpJ IHRoaW5rIEkgZG9uJ3QgdW5kZXJzdGFuZCBob3cgdGhlIHNwYXJlIGhlYWRlciBzcGFjZSBhZmZl Y3RzIHRoaXM/DQoNCkkgdGhvdWdodCB5b3UnZCBqdXN0IHVzZSB0aGF0IGFzIGtpbmQgb2YgYSBq b3VybmFsPyBBbmQgdG8ga2VlcCBhIGNvcHkNCm9mIHRoZSByZWdpb24gdGhhdCBpcyBjdXJyZW50 bHkgcmUtZW5jcnlwdGVkLCBhbmQgb25jZSB0aGF0IG9uZSBoYXMNCmZpbmlzaGVkIGl0IHdvdWxk IG1vdmUgb24/DQoNCj4gDQo+IG9yIGJlY2F1c2UgYW4gYXR0YWNrIHN0YXJ0ZWQgb25seSBlLmcu IGF0DQo+ID4gaGFsZiBvIHRoZSBibG9ja3MsIGJ1dCB0aGVuIG9uZSBoYWxmIGlzIGVuY3J5cHRl ZCBhbmQgdGhlIG90aGVyDQo+ID4gbm90Pw0KPiANCj4gTm9wZSwgaW4gdGhpcyBjYXNlIGRldmlj ZSB3b3VsZCBhY3RpdmF0ZSBqdXN0IGZpbmUsIHBhcnQgb2YgdGhlDQo+IGRldmljZSANCj4gZW5j cnlwdGVkIGFuZCBwYXJ0IHBsYWludGV4dCAobXVsdGkgc2VnbWVudCBkZXZpY2UtbWFwcGVyIGRl dmljZSkuIA0KPiBPdGhlcndpc2Ugd2Ugd291bGQgYmUgdW5hYmxlIHRvIGFjdGl2YXRlIHBhcnRp YWxseSBkZWNyeXB0ZWQgZGV2aWNlcw0KPiBkdWUgDQo+IHRvIGludGVycnVwdGlvbi4gU2FtZSBh cHBsaWVzIHRvIGRldmljZXMgaW4gZW5jcnlwdGlvbiBvcg0KPiByZWVuY3J5cHRpb24uDQoNClNv IHlvdSBrZWVwIGJvb2sgKGluIGEgc2VjdXJlZCB3YXk/KSBvbiB3aGljaCByZWdpb25zIGhhdmUg YmVlbiByZS0NCmVuY3J5cHRlZCBhbHJlYWR5IGFuZCB3aGljaCBub3Q/DQpJIGFzc3VtZWQgaXQg d291bGQgYmUganVzdCBzb21lICJwb2ludGVyIiB0aGF0IHNob3dzIGF0IG9uZSBwb3NpdGlvbg0K ZnJvbSBzdGFydCB0byBlbmQsIHdoZXJlIHRoZSBzeXN0ZW0gY3VycmVudGx5IHdhcy4NCg0KDQo+ IFJhbnNvbXdhcmUgYXR0YWNrIGlzIG5vdCBwb3NzaWJsZSBwcm92aWRlZCBhdHRhY2tlciBkb2Vz IG5vdCBrbm93DQo+IHZhbGlkIA0KPiBwYXNzcGhyYXNlIG9yIFZLLCBpZiB0aGF0J3Mgd2hhdCB5 b3UncmUgYXNraW5nOg0KDQpUaGF0IHdhcyBsZXNzIGFib3V0IHJhbnNvbXdhcmUgYXR0YWNrLi4u IGNhdXNlIHdoZW4gYW4gYXR0YWNrZXIgd291bGQNCmhhdmUgYWNjZXNzIHRvIHRoZSBvZmZsaW5l IGRldmljZSwgaGUnZCBlaXRoZXIgY29tcHJvbWlzZWQgdGhlIHN5c3RlbQ0KYWxyZWFkeSwgb3Ig aGFzIHBoeXNpY2FsIGFjY2Vzcy4uLiBhbmQgaW4gYm90aCBjYXNlcyBoZSBjb3VsZCBhbHNvIGp1 c3QNCmRvIHRoZSBhdHRhY2sgKG9yIHNpbXBseSBzdGVhbCB0aGUgcGh5c2ljYWwgZGV2aWNlKS4N Cg0KSSB3YXMgcmF0aGVyIGp1c3Qgd29uZGVyaW5nLCB3aGV0aGVyIGR1cmluZyBlbmNyeXB0aW5n IHRoZSBuZXcga2V5IGlzDQpldmVyIHdyaXR0ZW4gdG8gZGlzayBpbiBhbiBpbnNlY3VyZSB3YXkg KHdoaWNoIHRoZXkga2V5c2xvdCwgd2hlcmUgaXQNCmlzIGVuY3J5cHRlZCwgd291bGRuJ3QgYmUp DQoNCg0KDQo+IFRoYXQgd291bGQgbm90IGJlIHBvc3NpYmxlIHdpdGggTFVLUzIgZm9ybWF0LCBv ciBiZXR0ZXIgc2F5IHdpdGgNCj4gY3VycmVudCANCj4gdmVyc2lvbiBvZiBBUEkgb2YgbGliY3J5 cHRzZXR1cC4gSWYgdGhlIHdob2xlIGhlYWRlciB3YXMgdG8gYmUNCj4gcHJvdGVjdGVkIA0KPiBi eSBNQUMgaXQgd291bGQgcmVxdWlyZSBjb21wbGV0ZSByZXdvcmsgb2YgQVBJIHdoaWNoIHdvdWxk IG5vdCBiZSANCj4gYmFja3dhcmQgY29tcGF0aWJsZS4gSXQgd291bGQgcHJvYmFibHkgYmUgTFVL UzMgZm9ybWF0L2xpYnJhcnkuDQoNCldlbGwuLi4gY291bGQgc2F2ZSB1cyBmcm9tIHRyb3VibGVz IHNvbWUgZGF5IDstKQ0KDQoNCj4gQWxzbywganVzdCBmb3IgTFVLUzIgcmVlbmNyeXB0aW9uLCBp dCB3b3VsZCBjb21wbGV0ZWx5IGtpbGwgdGhlIA0KPiBwZXJmb3JtYW5jZSBvZiB0aGUgb3BlcmF0 aW9uLiBEdXJpbmcgTFVLUzIgcmVlbmNyeXB0aW9uIHRoZSBqc29uIA0KPiBtZXRhZGF0YSBhcmVh IGdldHMgdXBkYXRlZCBxdWl0ZSBvZnRlbiAodHdpY2UgcGVyIHNpbmdsZSByZWVuY3J5cHRpb24N Cj4gc3RlcCB3aGljaCBpcyB0eXBpY2FsbHkgfjEwME1pQnMgb2YgZGF0YSByZWVuY3J5cHRlZWQg d2l0aCBjaGVja3N1bSANCj4gcmVzaWxpZW5jZSBtb2RlKS4gSWYgd2UgY2FsY3VsYXRlZCBhdXRo ZW50aWNhdGlvbiBkaWdlc3QgKHRpbWUNCj4gZXhwZW5zaXZlIA0KPiBvcGVyYXRpb24pIGluIGVh Y2ggc3RlcCB0d2ljZSBpdCB3b3VsZCBub3QgZ28gZmFzdC4NCg0KVGhhdCByZWZlcnMgdG8gdGhl IGluZm9ybWF0aW9uIG9uIHdoaWNoIHJlZ2lvbnMgaGF2ZSBhbHJlYWR5IGJlZW4gcmUtDQplbmNy eXB0ZWQgcmlnaHQ/DQoNCg0KSSBhc3N1bWUsIHVubGVzcyByZS0iZW5jcnlwdGlvbiIgdG8gcGxh aW4gdGV4dCBpcyBwZXJmb3JtZWQsLi4uIHRoZQ0KY2xlYXItdGV4dCBuZXZlciBnb2VzIG9uIGRp c2sgZHVyaW5nIGEgIm5vcm1hbCIgcmUtZW5jcnlwdGlvbj8hDQoNCg0KVGhhbmtzLA0KQ2hyaXMu DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpkbS1jcnlw dCBtYWlsaW5nIGxpc3QgLS0gZG0tY3J5cHRAc2FvdXQuZGUKVG8gdW5zdWJzY3JpYmUgc2VuZCBh biBlbWFpbCB0byBkbS1jcnlwdC1sZWF2ZUBzYW91dC5kZQo=