mug/aports
Watch
2
Fork
You've already forked aports
 0
Code Issues 1 Pull requests 7 Releases Packages 51 Activity Actions

Update dependency luksmeta to v11 #42

Open
Renovate wants to merge 1 commit from renovate/luksmeta-11.x into v3.24
pull from: renovate/luksmeta-11.x
merge into: mug:v3.24
Conversation 0 Commits 1 Files changed 1 +3 -3
Renovate commented 2026-10-29 12:00:28 +00:00
Collaborator

This PR contains the following updates:

Package Update Change
luksmeta major 9 → 11

Release Notes

latchset/luksmeta (luksmeta)

v11: Release version 11

Compare Source

luksmeta v11 Release Notes

Security

CVE-2026-107565: Incomplete gap-boundary and overlap checks in LUKS1 metadata allocator allow data corruption

  • Fix the gap allocator's overlap() predicate to use canonical half-open interval intersection and pass the bare gap length (not offset-shifted) as the hard limit, preventing a fully-contained candidate range from evading the overlap check and corrupting adjacent slot data.

CVE-2026-111555: Missing slot-range validation permits out-of-gap device I/O

  • Add an overflow-safe check in read_header() that the complete occupied slot range (offset + length) fits within the metadata gap, preventing a checksum-valid malformed header from directing luksmeta_load() or luksmeta_wipe() to perform I/O past the gap boundary.

v10: Release version 10

Compare Source

luksmeta v10 Release Notes

Security

CVE-2025-11568: Fix handling of large metadata

  • Fixed vulnerability where large metadata could overflow beyond the LUKS header gap and corrupt encrypted
    data

New Features

  • PPC64LE support: Added support for PowerPC 64-bit Little Endian architecture
  • Documentation: Added numeric return code values to documentation

Bug Fixes

  • libcryptsetup logging: Defined log callback to route libcryptsetup logs to stderr, preventing output
    interference

Test Suite

  • Force LUKS1 container creation for compatibility with cryptsetup 2.1+
  • Relaxed content tests to handle cryptsetup 2.0.5+ random data in unused header sections

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [luksmeta](https://github.com/latchset/luksmeta) | major | `9` → `11` | --- ### Release Notes <details> <summary>latchset/luksmeta (luksmeta)</summary> ### [`v11`](https://github.com/latchset/luksmeta/releases/tag/v11): Release version 11 [Compare Source](https://github.com/latchset/luksmeta/compare/v10...v11) ### luksmeta v11 Release Notes #### Security **CVE-2026-107565: Incomplete gap-boundary and overlap checks in LUKS1 metadata allocator allow data corruption** - Fix the gap allocator's overlap() predicate to use canonical half-open interval intersection and pass the bare gap length (not offset-shifted) as the hard limit, preventing a fully-contained candidate range from evading the overlap check and corrupting adjacent slot data. **CVE-2026-111555: Missing slot-range validation permits out-of-gap device I/O** - Add an overflow-safe check in read\_header() that the complete occupied slot range (offset + length) fits within the metadata gap, preventing a checksum-valid malformed header from directing luksmeta\_load() or luksmeta\_wipe() to perform I/O past the gap boundary. ### [`v10`](https://github.com/latchset/luksmeta/releases/tag/v10): Release version 10 [Compare Source](https://github.com/latchset/luksmeta/compare/v9...v10) ### luksmeta v10 Release Notes #### Security **CVE-2025-11568: Fix handling of large metadata** - Fixed vulnerability where large metadata could overflow beyond the LUKS header gap and corrupt encrypted data #### New Features - **PPC64LE support**: Added support for PowerPC 64-bit Little Endian architecture - **Documentation**: Added numeric return code values to documentation #### Bug Fixes - **libcryptsetup logging**: Defined log callback to route libcryptsetup logs to stderr, preventing output interference #### Test Suite - Force LUKS1 container creation for compatibility with cryptsetup 2.1+ - Relaxed content tests to handle cryptsetup 2.0.5+ random data in unused header sections </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE5NS4xIiwidGFyZ2V0QnJhbmNoIjoidjMuMjQiLCJsYWJlbHMiOltdfQ==-->
Update dependency luksmeta to v11
Some checks failed
Main workflow / changed (pull_request) Successful in 4s
Details
Main workflow / build (luksmeta) (pull_request) Failing after 12s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
b35c12d24d
Some checks failed
Main workflow / changed (pull_request) Successful in 4s
Details
Main workflow / build (luksmeta) (pull_request) Failing after 12s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 'renovate/luksmeta-11.x:renovate/luksmeta-11.x'
git switch 'renovate/luksmeta-11.x'

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch 'v3.24'
git merge --no-ff 'renovate/luksmeta-11.x'
git switch 'renovate/luksmeta-11.x'
git rebase 'v3.24'
git switch 'v3.24'
git merge --ff-only 'renovate/luksmeta-11.x'
git switch 'renovate/luksmeta-11.x'
git rebase 'v3.24'
git switch 'v3.24'
git merge --no-ff 'renovate/luksmeta-11.x'
git switch 'v3.24'
git merge --squash 'renovate/luksmeta-11.x'
git switch 'v3.24'
git merge --ff-only 'renovate/luksmeta-11.x'
git switch 'v3.24'
git merge 'renovate/luksmeta-11.x'
git push origin 'v3.24'
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mug/aports!42
No description provided.