From 30c8bd4a51471b2bdbf4f2c4a75f730e8db2cab2 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Mon, 17 Nov 2025 08:44:51 +0100 Subject: [PATCH] package/luksmeta: security bump to version 10 Fixes the following security issue: CVE-2025-11568: A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. https://github.com/advisories/GHSA-pvmm-7c2r-wmp4 https://github.com/latchset/luksmeta/releases/tag/v10 Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain (cherry picked from commit 80764d7208efe860bb35f146ea4962f15e21936f) Signed-off-by: Thomas Perale --- package/luksmeta/luksmeta.hash | 2 +- package/luksmeta/luksmeta.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/luksmeta/luksmeta.hash b/package/luksmeta/luksmeta.hash index b367f29a5c..5936fb56f3 100644 --- a/package/luksmeta/luksmeta.hash +++ b/package/luksmeta/luksmeta.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 2ca0c35b551b331ba1444fc9d36e8c48ff8cae53dd4e6155b028e8904edc202a luksmeta-9.tar.bz2 +sha256 a842538ba39680c8319c41dac0bcc082fe40fb43342561761925c0daa1a48f28 luksmeta-10.tar.bz2 sha256 4b72eb6b5a336cd3ec837cc2d6347c23bf7574168db6b4802267700b93021abf COPYING diff --git a/package/luksmeta/luksmeta.mk b/package/luksmeta/luksmeta.mk index 129713aec8..bfbda9fb36 100644 --- a/package/luksmeta/luksmeta.mk +++ b/package/luksmeta/luksmeta.mk @@ -4,7 +4,7 @@ # ################################################################################ -LUKSMETA_VERSION = 9 +LUKSMETA_VERSION = 10 LUKSMETA_SOURCE = luksmeta-$(LUKSMETA_VERSION).tar.bz2 LUKSMETA_SITE = https://github.com/latchset/luksmeta/releases/download/v$(LUKSMETA_VERSION) LUKSMETA_LICENSE = LGPL-2.1+