v2.8.5From commit messages
Version 2.8.5.
Added 1
- Support for external tokens without dlvsym in musl and argp detection with argp-standalone static-only library.
Changed 2
- Use portable bitops.h instead of Linux endian.h in utf8.c and increased number of allowed threads in OpenSSL backend.
- Meson build system improvements including UUID header path detection, pkg-config for popt library discovery, and crypto backend library dependency propagation to all targets.
Fixed 7
- UUID verification of resumed devices now matches UUID stored in metadata.
- Reading from wrong image offset, fvault2 metadata block offset check, and LUKS2 reencryption lock and data offset functions.
- crypt_resize() data leak on error path, wiping of larger Veracrypt password pool, and crypt_capi_to_cipher() prefix validation.
- Kernel crypto backend sa.salg_type snprintf check, OpenSSL CTX_dup failure handling, device_alignment for NULL device, and DM_INTEGRITY union access in _reload_device().
- Keyring name buffer size in DM table with proper bounds checking, flags initialization to prevent reading uninitialized values on dm_flags() failure, and integrity sector size overflow from disk reads.
- strtoll() failure checking, fvault2 key unwrapping memory allocation, OpenSSL RAND_bytes buffer size validation, and posix_fallocate error reporting.
- Verity tree hash file flushing between levels and OpenSSL crypto backend build compatibility with LibreSSL.