cryptsetup: update to 2.8.6

Stable bug-fix release. All users of cryptsetup 2.8.x must upgrade.

Changes since 2.8.4:
 * Fix FileVault (fvault2) metadata parsing crash with crafted images.
   Reported by David Pokora (Trail of Bits/Anthropic).
 * Fix reading FileVault image metadata from incorrect image offset.
 * OpenSSL backend: increase the number of allowed threads to 64
   (workaround for parallel Argon2 PBKDF deadlock).
 * Fix LUKS2 reencryption lock name when the device is being reencrypted.
 * Check UUID of the resumed device to match UUID stored in metadata.
 * Add a specific error for failed detached header allocation.
 * Fix tests not to use aes-generic kernel cipher name (Linux 7.0+).
 * Fix OpenSSL crypto backend if built with LibreSSL.
 * Several compatibility fixes to the alternative Meson configuration.
 * Various code fixes based on AI-assisted reviews (memory wiping,
   error paths, integrity sector overflow, device-mapper flags, ...).

Link: https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.8.6/docs/v2.8.6-ReleaseNotes
Signed-off-by: Daniel Golle <redacted>

diff --git a/utils/cryptsetup/Makefile b/utils/cryptsetup/Makefile
index a7f0fa1f2d79fe5a50d00605aa873fadee473b2b..86c3034c54f5104970b9576a80b95183683cbd1d 100644 (file)
--- a/utils/cryptsetup/Makefile
+++ b/utils/cryptsetup/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=cryptsetup
-PKG_VERSION:=2.8.0
+PKG_VERSION:=2.8.6
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=@KERNEL/linux/utils/cryptsetup/v$(subst $(space),.,$(wordlist 1, 2, $(subst .,$(space),$(PKG_VERSION))))
-PKG_HASH:=cc9e2d37c25a871cea37520b28d532207b0c1670fb10fc54d68071f63f5243a2
+PKG_HASH:=8004265fd993885d08f7b633dbe056851de1a210307613a4ebddc743fccefe5a
 
 PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
 PKG_LICENSE:=GPL-2.0-or-later LGPL-2.1-or-later