[dm-crypt] [ANNOUNCE] cryptsetup 2.4.3 (CVE-2021-4122 fix)

Milan Broz <[email protected]> Thu, 13 Jan 2022 11:05:07 +0100
Newsgroups de.saout.dm-crypt
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============0858574561288800275==
Content-Language: en-US
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------fXEL7ECHoAug0YoGKOLlzK0e"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------fXEL7ECHoAug0YoGKOLlzK0e
Content-Type: multipart/mixed; boundary="------------GuO0mUGjT98kFVFrBKjCFM3m";
 protected-headers="v1"
From: Milan Broz <[email protected]>
To: dm-crypt <[email protected]>
Message-ID: <[email protected]>
Subject: [ANNOUNCE] cryptsetup 2.4.3 (CVE-2021-4122 fix)

--------------GuO0mUGjT98kFVFrBKjCFM3m
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------GuO0mUGjT98kFVFrBKjCFM3m--

--------------fXEL7ECHoAug0YoGKOLlzK0e
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----
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=Dywg
-----END PGP SIGNATURE-----

--------------fXEL7ECHoAug0YoGKOLlzK0e--

--===============0858574561288800275==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]

--===============0858574561288800275==--