[ANNOUNCE] cryptsetup 2.7.2

Milan Broz <[email protected]> Tue, 9 Apr 2024 12:17:46 +0200
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]>
The cryptsetup 2.7.2 stable release is available at

              https://gitlab.com/cryptsetup/cryptsetup

Please note that release packages are located on kernel.org

              https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/

Feedback and bug reports are welcomed.

Cryptsetup 2.7.2 Release Notes
==============================
Stable bug-fix release.

All users of cryptsetup 2.7 should upgrade to this version.

Changes since version 2.7.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix activation of OPAL-only encrypted LUKS device with tokens.
   The issue was caused by an invalid volume key check (assert)
   that is impossible without software encryption.

* Fix formatting of OPAL devices with 4096-byte sector size.

* Fix incorrect OPAL locking range alignment calculation if used
   over an unaligned device partition.

* Add --hw-opal-factory-reset option description to the manual page.

* Do not check the passphrase quality for OPAL Admin PIN,
   as this passphrase already exists.

* Update license for FAQ document to CC BY-SA 4.0.

NOTE: Please note that with OPAL-only (--hw-opal-only) encryption,
the configured OPAL administrator PIN (passphrase) allows unlocking
all configured locking ranges without LUKS keyslot decryption
(without knowledge of LUKS passphrase).
Because of many observed problems with compatibility, cryptsetup
currently DOES NOT use OPAL single-user mode, which would allow such
decoupling of OPAL admin PIN access.
OpenPGP_0xD9B0577BD93E98FC.asc (application/pgp-keys, 4.6 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=VXKq
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmYVFcsACgkQ2bBXe9k+
mPxcDQ/8CliRT4/dRKl+9Ah126SoghCwA90UUmTgTZ6yJXpQZKtcyrfOT2xYfG9t
nXtNOj2B2vXhMXvL79vvfmN9vd1WpqdZdfwHNv37jbXjHz/uydEPO4Hw6CznlhcI
UR3BV5FwfcAc9DRdjHEi3Uqz9P4epsMAwIiXD8TWGDKpyY9Polz/GgYL42Rq5T/9
vsRaQ5pepCZHq9x6pe3URhh9bW0Lj2KDhB/wtkUG8qtyNFp8zuTlfJwae1T5gOJd
d1nzO4HvWOo9JZZ5Er5UBAE3OkqwJ80QZQgrA8QYnC9NKneuL0yzEzs0DHs09bn7
UAnvOwhITn/PHAlHV8wcZr4lRy+d1wa0TXLGtdgmwm6aUWSJrIX08WfbjPf7HVlB
jpLazZVrYxYM2HS3/8UYx2N3IFjHuO5F7nxnhJQKnjmXTolwHS9RTxmOYx8w29DJ
NkAs+XdfoRc0tChTk7E6eb6WSEfMfTV3ZQKvzpfwULKhGljtYCYe2VZst+fPqDlV
nx4GP9XNRwQXhFZLzbbJXVM35uM4A2eKqjP4JhX5Zw51FSDcUPGB6m+bFPrik6di
GBkKM0yxGZoG0pitGSO9RLr+mPptLEnuQe3kKIaaXjhU+TU934esa107Lu3uj0U9
lS/A/EM0Xd/ryNZWXnkZFOjCsQPn3TgfLkzdi75Krec8dWzf+zM=
=nBtz
-----END PGP SIGNATURE-----