openSUSE-SU-2026:21325-1

Описание

This update for cryptsetup fixes the following issues:

Changes in cryptsetup:

• Fix for (bsc#1270254) to avoid undesired pinning of all volume keys (via the thread keyring) through the caller's credentials when the kernel opens a file. This is due to the refactoring in kernel commit a28d893eb327 ("md: port block device access to file") that accidentally causes the caller's thread keyring to be kept alive long beyond the caller's lifetime, the kernel part is tracked in (bsc#1270252).

  • Add keyring key type. [b6fb6fc0]
  • Load volume keys in intermediary keyring linked in thread keyring. [413a3dd0]
  • Use unique intermediary keyring name per device. [04ef07a7]
  • Add regression tests. [bfcb0c38, bb5e8e9f, e6573494, aa214c09]