[ANNOUNCE] cryptsetup 2.2.1

The cryptsetup 2.2.1 release is available at

    https://gitlab.com/cryptsetup/cryptsetup

Please note that release packages are located on kernel.org

    https://www.kernel.org/pub/linux/utils/cryptsetup/v2.2/

Feedback and bug reports are welcomed.

Cryptsetup 2.2.1 Release Notes
==============================
Stable bug-fix release.

This version contains a fix for a possible data corruption bug
on 32-bit platforms.
All users of cryptsetup 2.1 and 2.2 should upgrade to this version.

Changes since version 2.2.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Fix possible data length and IV offset overflow on 32bit architectures.
  Other 64-bit architectures are not affected.

  The flawed helper function prototypes (introduced in version 2.1.0) used
  size_t type, that is 32-bit integer on 32-bit systems.
  This patch fixes the problem to properly use 64-bit types.

  If the offset parameter addresses devices larger than 2TB, the value
  overflows and stores incorrect information in the metadata.
  For example, integrity device is smaller than expected size if used
  over large disk on 32-bit architecture.

  This issue is not present with the standard LUKS1/LUKS2 devices without
  integrity extensions.

* Fix a regression in TrueCrypt/VeraCrypt system partition activation.

* Reinstate missing backing file hint for loop device.

  If the encrypted device is backed by a file (loopback), cryptsetup now
  shows the path to the backing file in passphrase query (as in 1.x version).

* LUKS2 reencryption block size is now aligned to reported optimal IO size.
  This change eliminates possible non-aligned device warnings in kernel log
  during reencryption.

_______________________________________________
dm-crypt mailing list
[email protected]
https://www.saout.de/mailman/listinfo/dm-crypt

-----BEGIN PGP SIGNATURE-----
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=RdtU
-----END PGP SIGNATURE-----