Jonas Meurer wrote: > hello debian-release, Hi
> I'd like to request a freeze exception for cryptsetup 1.0.6-4. I didn't > upload it to unstable yet, but if no objections are raised, I'll do so > tomorrow. Cc-ing debian-boot as it contains a udeb... no objections from the RT. Cheers Luk > at least one change (to use askpass in the init script) is very likely > to fix several issues, among others a security bug (#477203). > > please note that current cryptsetup in testing is 1.0.6-1 which is > rather outdated. according to grep-excuses, 1.0.6-2 was unblocked by Luk > but didn't migrate to testing due to a version mismatch (maybe -3 was > uploaded exactly at the time the unblock request was made). > > it would be really sad to not have the many improvements since 1.0.6-1 > in lenny. > > the exact changelog for -2 to -4 is attached below. > > greetings, > jonas > > cryptsetup (2:1.0.6-4) unstable; urgency=low > > [ David Härdeman ] > * Make sure $IGNORE is reset as necessary, patch by > Thomas Luzat <[EMAIL PROTECTED]> (closes: #490199) > * Use askpass in init scripts as well (closes: #489033, #477203) > > [ Jonas Meurer ] > * Don't copy_exec libgcc1 in cryptopensc initramfs hook, as it's already > copied by copy_exec /usr/sbin/pcscd automaticly. Thanks to Evgeni Golov > <[EMAIL PROTECTED]>. (closes: #490300) > * Remove the udev rules file again as the relevant rules are now provided > by dmsetup package which cryptsetup depends on. > > -- Jonas Meurer <[EMAIL PROTECTED]> Fri, 18 Jul 2008 01:08:54 +0200 > > cryptsetup (2:1.0.6-3) unstable; urgency=low > > [ Jonas Meurer ] > * Fix cryptdisks.functions to actually recognize the noauto option. Thanks > to Christian Pernegger <[EMAIL PROTECTED]> (closes: #483882) > * Update patches/02_manpage.patch to fix two more typos, thanks to Bruno > Barrera Yever <[EMAIL PROTECTED]> (closes: #476624) and to remove a > duplicate sentence. > * Rephrase "Enter password for $crypttarget" to "Enter password to unlock > the disk $cryptsource ($crypttarget)" in initramfs/cryptroot.script. > * Bump Standards-Version to 3.8.0: > - Add a README.source which references /usr/share/doc/quilt/README.source. > - Add support for debian build option parallel=n to debian/rules. > * Add a udev rules file to ignore temporary-cryptsetup-* devices, as > suggested in bug #467200. Thanks to Sam Morris <[EMAIL PROTECTED]>. > * Transform debian/copyright into machine-readable code as proposed in > http://wiki.debian.org/Proposals/CopyrightFormat. Update and add several > copyright notices. > * Change reference to docbook xml v4.2 driver file from an online version > to a local one in the manpage files, as the build process should not > depend on internet access. Add docbook-xml to build-depends. Thanks to > Lucas Nussbaum <[EMAIL PROTECTED]>. (closes: #487056) > > [ David Härdeman ] > * Hopefully fix askpass to properly handle console and usplash input > (closes: #477203) > * Clarify crypttab manpage (closes: #487246) > * Make regex work if keyfile has extended attributes, > https://launchpad.net/bugs/231339 (closes: #488131) > * Support comments in options part of crypttab (closes: #488128) > > -- Jonas Meurer <[EMAIL PROTECTED]> Mon, 07 Jul 2008 00:30:07 +0200 > > cryptsetup (2:1.0.6-2) unstable; urgency=low > > [ Jonas Meurer ] > * Taken from ubuntu: > - debian/scripts/luksformat: Use 256 bit key size by default. (LP: #78508) > - debian/patches/02_manpage.patch: Clarify default key sizes (128 for > luksFormat and 256 for create) in cryptsetup.8. (side-note in LP #78508) > * Use 'shred -uz' instead of 'rm -r' to remove a tempfile that contains a > key in gen-ssl-key example script. > > [ David Härdeman ] > * Misc bugfixes to askpass, make sure it is installed to the correct > location and is built using pedantic mode. > * Change the initramfs script to use askpass to prompt for > passphrases, this should hopefully fix #382375 and #465902 once it > is enabled in the init scripts as well. > * Add a keyscript called passdev which allows a keyfile to be > retrieved from a device which is first mounted, mainly useful to get > keyfiles off USB devices etc. > * Unbreak MODULES=dep booting (closes: #478268) > * Relax checks for suspend devices a bit (closes: #477658) > * Convert man pages to docbook. > > -- David Härdeman <[EMAIL PROTECTED]> Mon, 26 May 2008 08:12:32 +0200 > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
