Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package fde-tools for openSUSE:Factory checked in at 2026-08-12 16:10:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fde-tools (Old) and /work/SRC/openSUSE:Factory/.fde-tools.new.17972 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fde-tools" Wed Aug 12 16:10:32 2026 rev:37 rq:1370626 version:0.7.7 Changes: -------- --- /work/SRC/openSUSE:Factory/fde-tools/fde-tools.changes 2026-08-04 21:28:28.995744012 +0200 +++ /work/SRC/openSUSE:Factory/.fde-tools.new.17972/fde-tools.changes 2026-08-12 16:10:59.926657927 +0200 @@ -1,0 +2,7 @@ +Tue Aug 11 07:18:17 UTC 2026 - Gary Ching-Pang Lin <[email protected]> + +- Update to 0.7.7 + + Enforce standard locale when parsing external program outputs + (bsc#1273502) + +------------------------------------------------------------------- Old: ---- fde-tools-0.7.6.tar.bz2 New: ---- fde-tools-0.7.7.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fde-tools.spec ++++++ --- /var/tmp/diff_new_pack.LVEO1S/_old 2026-08-12 16:11:00.766693009 +0200 +++ /var/tmp/diff_new_pack.LVEO1S/_new 2026-08-12 16:11:00.770693176 +0200 @@ -21,7 +21,7 @@ %endif Name: fde-tools -Version: 0.7.6 +Version: 0.7.7 Release: 0 Summary: Tools required for Full Disk Encryption License: GPL-2.0-only ++++++ fde-tools-0.7.6.tar.bz2 -> fde-tools-0.7.7.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/fde-tools-0.7.6/fde.sh new/fde-tools-0.7.7/fde.sh --- old/fde-tools-0.7.6/fde.sh 2026-07-30 04:47:16.538494203 +0200 +++ new/fde-tools-0.7.7/fde.sh 2026-08-11 09:15:24.667343794 +0200 @@ -22,7 +22,7 @@ : ${SHAREDIR:=/usr/share/fde} -version=0.7.6 +version=0.7.7 opt_bootloader=grub2 opt_uefi_bootdir="" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/fde-tools-0.7.6/share/grub2 new/fde-tools-0.7.7/share/grub2 --- old/fde-tools-0.7.6/share/grub2 2026-07-30 04:47:12.995515101 +0200 +++ new/fde-tools-0.7.7/share/grub2 2026-08-11 09:15:17.915379638 +0200 @@ -241,7 +241,7 @@ fi # Check if grub2 supports the RSA4096 SRK. - if grub2-protect --help | grep -q "RSA4096"; then + if LC_ALL=C grub2-protect --help | grep -q "RSA4096"; then echo "4096 3072 2048" return 0 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/fde-tools-0.7.6/share/luks new/fde-tools-0.7.7/share/luks --- old/fde-tools-0.7.6/share/luks 2025-12-12 03:58:36.184129700 +0100 +++ new/fde-tools-0.7.7/share/luks 2026-08-11 09:15:17.915379638 +0200 @@ -327,7 +327,7 @@ # Note: we try to reduce the cost of PBKDF to (almost) nothing. # There's no need in slowing down this operation for a # key that was random to begin with. - luks_output=$(cryptsetup --verbose --key-file "${luks_keyfile}" luksAddKey \ + luks_output=$(LC_ALL=C cryptsetup --verbose --key-file "${luks_keyfile}" luksAddKey \ --pbkdf "$FDE_LUKS_PBKDF" --pbkdf-force-iterations 1000 \ ${luks_dev} ${new_keyfile}) if test $? -ne 0; then @@ -395,7 +395,7 @@ # we need to perform reencryption during installation, after dd'ing the image to # disk and prior to mounting it. { - cryptsetup reencrypt --key-file "$luks_keyfile" --progress-frequency 1 $luks_dev 2>&1| + LC_ALL=C cryptsetup reencrypt --key-file "$luks_keyfile" --progress-frequency 1 $luks_dev 2>&1| sed -u 's/.* \([0-9]*\)[0-9.]*%.*/\1/' echo 100 } | display_gauge "Re-encrypting root file system on $luks_dev" @@ -410,7 +410,7 @@ # we need to perform reencryption during installation, after dd'ing the image to # disk and prior to mounting it. { - cryptsetup reencrypt --decrypt --key-file "$luks_keyfile" --progress-frequency 1 $luks_dev 2>&1| + LC_ALL=C cryptsetup reencrypt --decrypt --key-file "$luks_keyfile" --progress-frequency 1 $luks_dev 2>&1| sed -u 's/.* \([0-9]*\)[0-9.]*%.*/\1/' echo 100 } | display_gauge "Decrypting LUKS device $luks_dev" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/fde-tools-0.7.6/share/tpm new/fde-tools-0.7.7/share/tpm --- old/fde-tools-0.7.6/share/tpm 2026-07-30 04:47:12.995515101 +0200 +++ new/fde-tools-0.7.7/share/tpm 2026-08-11 09:15:17.915379638 +0200 @@ -208,7 +208,7 @@ tar xf ${snapshot_file} -C ${tmpdir} - pcr_out=$(pcr-oracle \ + pcr_out=$(LC_ALL=C pcr-oracle \ --from eventlog \ --verify snapshot \ --replay-testcase ${tmpdir}/${snapshot} \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/fde-tools-0.7.6/share/uefi new/fde-tools-0.7.7/share/uefi --- old/fde-tools-0.7.6/share/uefi 2025-07-29 05:00:40.738993652 +0200 +++ new/fde-tools-0.7.7/share/uefi 2026-08-11 09:15:17.915379638 +0200 @@ -31,7 +31,7 @@ return 1 fi - if ! mokutil --sb-state 2> /dev/null | grep -q "enabled" ; then + if ! LC_ALL=C mokutil --sb-state 2> /dev/null | grep -q "enabled" ; then fde_trace "Secure Boot not enabled" return 1 fi @@ -48,13 +48,13 @@ function uefi_get_current_loader { - entry=$(efibootmgr | grep BootCurrent|awk '{print $2;}') + entry=$(LC_ALL=C efibootmgr | grep BootCurrent|awk '{print $2;}') if [ -z "$entry" ]; then fde_trace "Cannot determine current UEFI boot entry" return 1 fi - file=$(efibootdump "Boot$entry" | sed 's/.*File(\([^)]*\)).*/\1/;t;d' | tr '\\' /) + file=$(LC_ALL=C efibootdump "Boot$entry" | sed 's/.*File(\([^)]*\)).*/\1/;t;d' | tr '\\' /) # Some boot setups do not use an EFI path with a file component. #
