Re: cryptsetup 2.4.3 (CVE-2021-4122 fix)
Ondrej Kozina <[email protected]> Mon, 17 Jan 2022 12:05:33 +0100
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
SGksDQoNCk9uIDE1LiAwMS4gMjIgNTowNiwgQ2hyaXN0b3BoIEFudG9uIE1pdHRlcmVyIHdyb3Rl Og0KPiBPbiBGcmksIDIwMjItMDEtMTQgYXQgMTI6MTggKzAxMDAsIE9uZHJlaiBLb3ppbmEgd3Jv dGU6DQo+Pj4gMSkgV291bGRuJ3QgdGhhdCB0aGVuIGNhdXNlIGNvbXBsZXRlIGRlY3J5cHRpb24/ IEkuZS4gY3J5cHRzZXR1cA0KPj4+IHNlZXMNCj4+PiB0aGF0IHJlLWVuY3J5cHQgKHRvIHBsYWlu IHRleHQpIHdhcyBhbGxlZ2VkbHkgYWJvcnRlZCBhdCBibG9jaw0KPj4+IFhZWi4uLg0KPj4+IGFu ZCB0aGVuIHJlLWVuY3J5cHRzICh0byBwbGFpbiB0ZXh0KSBmcm9tIHRoZXJlIG9uIHRoZSB3aG9s ZQ0KPj4+IGRldmljZT8NCj4+DQo+PiBOb3Qgd2l0aG91dCB1c2VyIG1hbnVhbCBpbnRlcnZlbnRp b24uIEN1cnJlbnRseSwgdGhlIHJlZW5jcnlwdGlvbg0KPj4gb3BlcmF0aW9uIGNhbiBub3QgYmUg cmVzdW1lZCB1bmxlc3MgdXNlciBkaXJlY3RseSBpc3N1ZSAiY3J5cHRzZXR1cA0KPj4gcmVlbmNy eXB0IiBjb21tYW5kIChhcHBsaWVzIHRvIGJvdGggZml4ZWQgYW5kIHZ1bG5lcmFibGUNCj4+IGNy eXB0c2V0dXBzKS4NCj4gDQo+IFRoZW4gSSBkb24ndCB1bmRlcnN0YW5kIHRoZSBhdHRhY2suLi4g Y2F1c2UgaWYgdCB3b3VsZCBiZSBvbmx5IHJlc3VtZWQNCj4gaWYgb25lIGVudGVycyBhIGNvbW1h bmQgbWFudWFsbHksIHRoZSBhdHRhY2tlZCB1c2VyIHdvdWxkIG5vdGljZT8NCg0KU3VyZSwgSSBj YW4gZXhwbGFpbiBiZXR0ZXIuIExldCdzIHN0aWNrIHRvIHR3byBkaWZmZXJlbnQgdGVybXM6DQoN CkkuIGluZGl2aWR1YWwgcmVlbmNyeXB0aW9uIHN0ZXAgKHJlZW5jcnlwdGlvbiBvZiBvbmUgb2Yg bWFueSBob3R6b25lcykNCklJLiBkZXZpY2UgcmVlbmNyeXB0aW9uIChha2EgaXRlcmF0aW9uIG9m IEkuIHN0ZXBzKQ0KDQpUaGUgcmVlbmNyeXB0aW9uIGhvdHpvbmUgc3RvcmVkIGluIExVS1MyIG1l dGFkYXRhIGRlc2NyaWJlcyBmb2xsb3dpbmcgDQoobGV0J3MgbWFrZSBpdCBkZWNyeXB0aW9uIGF0 dGFjayBleGFtcGxlKToNCg0KInRoZSBkYXRhIHN0YXJ0aW5nIGF0IG9mZnNldCBYLCBZIGxlbmd0 aCwgZGVzY3JpYmVzIGJsb2NrIGluIHRyYW5zaXRpb24gDQpmcm9tIGNpcGhlcnRleHQgdG8gcGxh aW50ZXh0IHRoYXQgd2FzIG5vdCBmaW5pc2hlZCB5ZXQiLg0KDQpJZiBsaWJjcnlwdHNldHVwIHNl ZSBzdWNoIG1ldGFkYXRhIHN0b3JlZCBpbiBMVUtTMiBoZWFkZXIsIGl0IHBlcmZvcm1zIA0KYXV0 by1yZWNvdmVyeSBkdXJpbmcgZGV2aWNlIGFjdGl2YXRpb24uDQoNCkR1cmluZyBhdXRvLXJlY292 ZXJ5IHRyaWdnZXJlZCBieSBlLmcuIGNyeXB0c2V0dXAgbHVrc09wZW4gY29tbWFuZCwgDQpsaWJj cnlwdHNldHVwIGRvZXMgbm90IHBlcmZvcm0gd2hvbGUgZGVjcnlwdGlvbiBvZiBkZXZpY2UgKElJ LiwgaXQgb25seSANCmNoZWNrcyBsYXN0IGhvdHpvbmUgKEkuKSBpcyBjb3JyZWNseSBkZWNyeXB0 ZWQuIElmIG5vdCBpdCBmaW5pc2hlcyB0aGUgDQpzaW5nbGUgaG90em9uZSBzbyB0aGF0IGl0IGlz IGluIGNvcnJlY3QgbmV3IHN0YXRlIChwbGFpbnRleHQpIGFzIA0KZGVzY3JpYmVkIGluIExVS1My IG1ldGFkYXRhLiBBZnRlcndhcmRzLCB0aGUgZGV2aWNlIGdldHMgYWN0aXZhdGVkIA0KdXN1YWxs eSBhcyB0d28gc2VnbWVudCBETSBkZXZpY2UuIEZvbGxvd2luZyBleGFtcGxlIGlzIGRldmljZSBh Y3RpdmF0ZWQgDQp3aGVuIGRlY3J5cHRpb24gcmVjb3ZlcnMgYWZ0ZXIgY3Jhc2ggc29tZXdoZXJl IGluIHRoZSBtaWRkbGUgb2YgdGhlIGRhdGEgDQpkZXZpY2U6DQoNCltMVUtTMiBvbi1kaXNrIGhl YWRlcl1bZGF0YTogcGxhaW50ZXh0XVtkYXRhOiBjaXBoZXJ0ZXh0XQ0KDQpUbyBmaW5pc2ggdGhl IGRlY3J5cHRpb24gcHJvY2VzcyAoSUkuKSwgdXNlciB3b3VsZCBoYXZlIHRvIG1hbnVhbGx5IA0K aXNzdWUgImNyeXB0c2V0dXAgcmVlbmNyeXB0IiBjb21tYW5kIGFnYWluLg0KDQpJZiB5b3Ugd2Fu dCB0byB1bmRlcnN0YW5kIHRoZSByZWVuY3J5cHRpb24gYXMgd2hvbGUgYmV0dGVyLCBwbGVhc2Ug c2VlIA0KbXkgc2xpZGVzIGZvciB0aGUgTFVLUzIgcmVlbmNyeXB0aW9uIGV4dGVuc2lvbiBoZXJl OiANCmh0dHBzOi8vb2tvemluYS5mZWRvcmFwZW9wbGUub3JnL29ubGluZS1kaXNrLXJlZW5jcnlw dGlvbi13aXRoLWx1a3MyLWNvbXBhY3QucGRmLCANCm9uIHNsaWRlIDggYW5kIGxhdGVyIGlzIHRo ZSBwcm9jZXNzIGRlc2NyaWJlZCBzdGVwLWJ5LXN0ZXAgKGFsc28sIHRoZSANCnRhbGsgcmVjb3Jk aW5nOiBodHRwczovL3lvdXR1LmJlLzU0dnlPTzhtV0dnKS4NCg0KU28gdGhlIGF0dGFjayBwcmlt YXJpbHkgdGFyZ2V0cyByZWNvdmVyeSwgdGhlIHNpbmdsZSBob3R6b25lIGNyYXNoIA0KcmVjb3Zl cnkgcHJvY2VzcyBpbiBhY3RpdmF0aW9uIGNvZGUuDQoNClRvIHJlc3VtZS9maW5pc2ggdGhlIHJl ZW5jcnlwdGlvbiBwcm9jZXNzIChhbmQgY29tcGxldGUgYWxsIHN0ZXBzIGluIA0KSUkuKSB1c2Vy IHdvdWxkIGhhdmUgdG8gaXNzdWUgY3J5cHRzZXR1cCByZWVuY3J5cHQgY29tbWFuZCBtYW51YWxs eSBhZ2Fpbi4NCg0KPiANCj4+IE9uIHRoZSBvdGhlciBoYW5kLCB0aGUgdnVsbmVyYWJpbGl0eSBw cmltYXJpbHkgdGFyZ2V0cyBMVUtTMg0KPj4gcmVlbmNyeXB0aW9uIGF1dG8tcmVjb3ZlcnkgZmVh dHVyZS4gQXV0by1yZWNvdmVyeSB0YWtlcyBwbGFjZSBpbiB0d28NCj4+IHNjZW5hcmlvczoNCj4g Li4uDQo+PiBiKSBMVUtTMiBkZXZpY2UgYWN0aXZhdGlvbiBlLmcuIGR1cmluZyBzeXN0ZW0gYm9v dC4NCj4gDQo+IE9rYXkgdGhhdCdzIHRoZSBzaXR1YXRpb24gSSd2ZSBoYWQgbWVhbnQgYmVmb3Jl Lg0KDQpBcyBkZXNjcmliZWQgYWJvdmUsIHRoaXMgd291bGQgcGVyZm9ybSBzaW5nbGUgaG90em9u ZSBzZWdtZW50IGRlY3J5cHRpb24gDQpvbmx5IChpbiBjcmFzaCByZWNvdmVyeSBjb2RlIHBhdGgp Lg0KDQo+IA0KPj4gU28gdGhlIHJlY292ZXJ5IGZyb20NCj4+IHJlZW5jcnlwdGlvbiBjcmFzaCBp cyBzZWFtbGVzcyBwcm92aWRlZCB1c2VyIGtub3dzIHBhc3NwaHJhc2UuDQo+IA0KPiBBbmQgdGhh dCdzIHRoZSBwb2ludCB3aGVyZSBJJ2QgaGF2ZSBleHBlY3RlZCB0aGUgZnVsbCBkZWNyeXB0aW9u LCBpLmUuOg0KPiANCj4gLSBhbiBhdHRhY2tlciBtZXNzZXMgd2l0aCB0aGUgaGVhZGVycyB3aGls ZSB0aGUgZGV2aWNlIGlzIG9mZmxpbmUNCj4gLSB0aGUgdXNlciBvcGVucyBpdCAoZS5nLiBvbiBu ZXh0IGJvb3QpLCBkb2Vzbid0IG5vdGljZSBhbnl0aGluZw0KPiAtIGNyeXB0c2V0dXAgImNvbnRp bnVlcyIgc2lsZW50bHksIGJ1dCBhY3R1YWxseSBkZWNyeXB0cw0KDQpObywgd2UgZG8gbm90IHNp bGVudGx5IGF1dG8tcmVzdW1lcyBMVUtTMiByZWVuY3J5cHRpb24gYXV0b21hdGljYWxseS4NCg0K PiANCj4gDQo+PiBJbiBjb3JuZXIgY2FzZSwgd2hlbiBkZXZpY2UgaXMgc21hbGwgZW5vdWdoIHRv IGZpdCBsaW1pdHMgZGlzY2xvc2VkDQo+PiBpbg0KPj4gdGhlIHZ1bG5lcmFiaWxpdHkgcmVwb3J0 IChhbmQgTFVLUzIgc3BhcmUgbWV0YWRhdGEgc3BhY2UgYWxsb3dzIGl0KQ0KPj4gdGhlDQo+PiAg wqAgYXV0by1yZWNvdmVyeSBtYXkgYWN0dWFsbHkgZmluaXNoIHRoZSBkZWNyeXB0aW9uIHByb2Nl c3MgKGluIG9uZQ0KPj4gc3RlcCkuDQo+IA0KPiBJIHRoaW5rIEkgZG9uJ3QgdW5kZXJzdGFuZCBo b3cgdGhlIHNwYXJlIGhlYWRlciBzcGFjZSBhZmZlY3RzIHRoaXM/DQo+IA0KPiBJIHRob3VnaHQg eW91J2QganVzdCB1c2UgdGhhdCBhcyBraW5kIG9mIGEgam91cm5hbD8gQW5kIHRvIGtlZXAgYSBj b3B5DQo+IG9mIHRoZSByZWdpb24gdGhhdCBpcyBjdXJyZW50bHkgcmUtZW5jcnlwdGVkLCBhbmQg b25jZSB0aGF0IG9uZSBoYXMNCj4gZmluaXNoZWQgaXQgd291bGQgbW92ZSBvbj8NCg0KWWVzLCBJ biBjYXNlIG9mICdqb3VybmFsJyByZXNpbGllbmNlIG1vZGUgdGhlIHNwYXJlIHNwYWNlIGlzIDE6 MSB3aXRoIA0KaG90em9uZSBzZWdtZW50IHNpemUuDQoNCkJ1dCBpZiAnY2hlY2tzdW1zJyByZXNp bGllbmNlIGlzIGluLXVzZSwgdGhlIGhvdHpvbmUgc2l6ZSBjYW4gYmUgbGFyZ2VyLiANCkl0IHN0 b3JlcyBzaW5nbGUgZGlnZXN0IHBlciBlbmNyeXB0aW9uIHNlY3RvciBzaXplIGJsb2NrIGluIHJl ZW5jcnlwdGlvbiANCmhvdHpvbmUuDQoNCj4gDQo+Pg0KPj4gb3IgYmVjYXVzZSBhbiBhdHRhY2sg c3RhcnRlZCBvbmx5IGUuZy4gYXQNCj4+PiBoYWxmIG8gdGhlIGJsb2NrcywgYnV0IHRoZW4gb25l IGhhbGYgaXMgZW5jcnlwdGVkIGFuZCB0aGUgb3RoZXINCj4+PiBub3Q/DQo+Pg0KPj4gTm9wZSwg aW4gdGhpcyBjYXNlIGRldmljZSB3b3VsZCBhY3RpdmF0ZSBqdXN0IGZpbmUsIHBhcnQgb2YgdGhl DQo+PiBkZXZpY2UNCj4+IGVuY3J5cHRlZCBhbmQgcGFydCBwbGFpbnRleHQgKG11bHRpIHNlZ21l bnQgZGV2aWNlLW1hcHBlciBkZXZpY2UpLg0KPj4gT3RoZXJ3aXNlIHdlIHdvdWxkIGJlIHVuYWJs ZSB0byBhY3RpdmF0ZSBwYXJ0aWFsbHkgZGVjcnlwdGVkIGRldmljZXMNCj4+IGR1ZQ0KPj4gdG8g aW50ZXJydXB0aW9uLiBTYW1lIGFwcGxpZXMgdG8gZGV2aWNlcyBpbiBlbmNyeXB0aW9uIG9yDQo+ PiByZWVuY3J5cHRpb24uDQo+IA0KPiBTbyB5b3Uga2VlcCBib29rIChpbiBhIHNlY3VyZWQgd2F5 Pykgb24gd2hpY2ggcmVnaW9ucyBoYXZlIGJlZW4gcmUtDQo+IGVuY3J5cHRlZCBhbHJlYWR5IGFu ZCB3aGljaCBub3Q/DQo+IEkgYXNzdW1lZCBpdCB3b3VsZCBiZSBqdXN0IHNvbWUgInBvaW50ZXIi IHRoYXQgc2hvd3MgYXQgb25lIHBvc2l0aW9uDQo+IGZyb20gc3RhcnQgdG8gZW5kLCB3aGVyZSB0 aGUgc3lzdGVtIGN1cnJlbnRseSB3YXMuDQoNClR3byBwb3NzaWJpbGl0aWVzOg0KDQphKSBMVUtT MiBtZXRhZGF0YSB3aXRoIGNyYXNoZWQgcmVlbmNyeXB0aW9uOiBJdCBzdG9yZXMgb2Zmc2V0IGFu ZCBsZW5ndGggDQpvZiB0aGUgbGFzdCBob3R6b25lLg0KDQpiKSBMVUtTMiBtZXRhZGF0YSBhZnRl ciBjcmFzaCByZWNvdmVyeTogVGhlIHBvaW50ZXIgd2hlcmUgdG8gcmVzdW1lIHRoZSANCm9wZXJh dGlvbiB3aGVuIHVzZXIgaXNzdWVzIGNyeXB0c2V0dXAgcmVlbmNyeXB0IGNvbW1hbmQgYWdhaW4u DQoNCg0KPiANCj4gDQo+PiBSYW5zb213YXJlIGF0dGFjayBpcyBub3QgcG9zc2libGUgcHJvdmlk ZWQgYXR0YWNrZXIgZG9lcyBub3Qga25vdw0KPj4gdmFsaWQNCj4+IHBhc3NwaHJhc2Ugb3IgVkss IGlmIHRoYXQncyB3aGF0IHlvdSdyZSBhc2tpbmc6DQo+IA0KPiBUaGF0IHdhcyBsZXNzIGFib3V0 IHJhbnNvbXdhcmUgYXR0YWNrLi4uIGNhdXNlIHdoZW4gYW4gYXR0YWNrZXIgd291bGQNCj4gaGF2 ZSBhY2Nlc3MgdG8gdGhlIG9mZmxpbmUgZGV2aWNlLCBoZSdkIGVpdGhlciBjb21wcm9taXNlZCB0 aGUgc3lzdGVtDQo+IGFscmVhZHksIG9yIGhhcyBwaHlzaWNhbCBhY2Nlc3MuLi4gYW5kIGluIGJv dGggY2FzZXMgaGUgY291bGQgYWxzbyBqdXN0DQo+IGRvIHRoZSBhdHRhY2sgKG9yIHNpbXBseSBz dGVhbCB0aGUgcGh5c2ljYWwgZGV2aWNlKS4NCj4gDQo+IEkgd2FzIHJhdGhlciBqdXN0IHdvbmRl cmluZywgd2hldGhlciBkdXJpbmcgZW5jcnlwdGluZyB0aGUgbmV3IGtleSBpcw0KPiBldmVyIHdy aXR0ZW4gdG8gZGlzayBpbiBhbiBpbnNlY3VyZSB3YXkgKHdoaWNoIHRoZXkga2V5c2xvdCwgd2hl cmUgaXQNCj4gaXMgZW5jcnlwdGVkLCB3b3VsZG4ndCBiZSkNCg0KQWJzb2x1dGVseSBub3QhIEtl eXMgYXJlIGFsd2F5cyBzdG9yZWQgaW4gcmVndWxhciBMVUtTMiBrZXlzbG90cyBvbi1kaXNrLg0K DQo+IA0KPiANCj4gDQo+PiBUaGF0IHdvdWxkIG5vdCBiZSBwb3NzaWJsZSB3aXRoIExVS1MyIGZv cm1hdCwgb3IgYmV0dGVyIHNheSB3aXRoDQo+PiBjdXJyZW50DQo+PiB2ZXJzaW9uIG9mIEFQSSBv ZiBsaWJjcnlwdHNldHVwLiBJZiB0aGUgd2hvbGUgaGVhZGVyIHdhcyB0byBiZQ0KPj4gcHJvdGVj dGVkDQo+PiBieSBNQUMgaXQgd291bGQgcmVxdWlyZSBjb21wbGV0ZSByZXdvcmsgb2YgQVBJIHdo aWNoIHdvdWxkIG5vdCBiZQ0KPj4gYmFja3dhcmQgY29tcGF0aWJsZS4gSXQgd291bGQgcHJvYmFi bHkgYmUgTFVLUzMgZm9ybWF0L2xpYnJhcnkuDQo+IA0KPiBXZWxsLi4uIGNvdWxkIHNhdmUgdXMg ZnJvbSB0cm91YmxlcyBzb21lIGRheSA7LSkNCj4gDQo+IA0KPj4gQWxzbywganVzdCBmb3IgTFVL UzIgcmVlbmNyeXB0aW9uLCBpdCB3b3VsZCBjb21wbGV0ZWx5IGtpbGwgdGhlDQo+PiBwZXJmb3Jt YW5jZSBvZiB0aGUgb3BlcmF0aW9uLiBEdXJpbmcgTFVLUzIgcmVlbmNyeXB0aW9uIHRoZSBqc29u DQo+PiBtZXRhZGF0YSBhcmVhIGdldHMgdXBkYXRlZCBxdWl0ZSBvZnRlbiAodHdpY2UgcGVyIHNp bmdsZSByZWVuY3J5cHRpb24NCj4+IHN0ZXAgd2hpY2ggaXMgdHlwaWNhbGx5IH4xMDBNaUJzIG9m IGRhdGEgcmVlbmNyeXB0ZWVkIHdpdGggY2hlY2tzdW0NCj4+IHJlc2lsaWVuY2UgbW9kZSkuIElm IHdlIGNhbGN1bGF0ZWQgYXV0aGVudGljYXRpb24gZGlnZXN0ICh0aW1lDQo+PiBleHBlbnNpdmUN Cj4+IG9wZXJhdGlvbikgaW4gZWFjaCBzdGVwIHR3aWNlIGl0IHdvdWxkIG5vdCBnbyBmYXN0Lg0K DQpGWUksIExVS1MyIGpzb24gbWV0YWRhdGEgYXJlIHN0b3JlZCB1c3VhbGx5IHR3aWNlIHBlciBz aW5nbGUgaG90em9uZSANCnJlZW5jcnlwdGlvbiAoSS4gYWJvdmUpDQoNCj4gDQo+IFRoYXQgcmVm ZXJzIHRvIHRoZSBpbmZvcm1hdGlvbiBvbiB3aGljaCByZWdpb25zIGhhdmUgYWxyZWFkeSBiZWVu IHJlLQ0KPiBlbmNyeXB0ZWQgcmlnaHQ/DQoNCnllcw0KDQo+IA0KPiANCj4gSSBhc3N1bWUsIHVu bGVzcyByZS0iZW5jcnlwdGlvbiIgdG8gcGxhaW4gdGV4dCBpcyBwZXJmb3JtZWQsLi4uIHRoZQ0K PiBjbGVhci10ZXh0IG5ldmVyIGdvZXMgb24gZGlzayBkdXJpbmcgYSAibm9ybWFsIiByZS1lbmNy eXB0aW9uPyENCg0KRXhhY3RseS4gSXQncyBhbHdheXMgZWl0aGVyICJvbGQiIGNpcGhlciB0ZXh0 IG9yICJuZXciIGNpcGhlcnRleHQuIA0KRXZlbnR1YWxseSBkaWdlc3Qocykgb2YgIm9sZCIgY2lw aGVydGV4dCBkZXBlbmRpbmcgb24gd2hhdCByZWVuY3J5cHRpb24gDQpyZXNpbGllbmNlIG1vZGUg d2FzIGluLXVzZS4NCg0KUmVnYXJkcw0KTy4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18KZG0tY3J5cHQgbWFpbGluZyBsaXN0IC0tIGRtLWNyeXB0QHNh b3V0LmRlClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gZG0tY3J5cHQtbGVhdmVAc2Fv dXQuZGUK