Your message dated Mon, 27 Jul 2026 21:18:48 +0000
with message-id <[email protected]>
and subject line Bug#1108201: fixed in fwupd 2.1.7-1
has caused the Debian Bug report #1108201,
regarding fwupdmgr security reports unencrypted swap with plain dm-crypt'ed swap
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1108201: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108201
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fwupd
Version: 2.0.12-1
Severity: minor
Tags: none
X-Debbugs-Cc: [email protected], Debian Security Team
<[email protected]>
Dear Maintainer,
I have a swap partition that uses plain dm-crypt encryption with a random
password as cannot be supported.
`/etc/crypttab`:
```
# <name> <device> <password> <options>
cryptswap PARTLABEL=cryptswap /dev/urandom
swap,plain,cipher=aes-xts-plain64,size=512,sector-size=4096
```
However, running `fwupdmgr security` shows `✘ Linux swap:
Unencrypted` even though it is encrypted, though it is not encrypted with LUKS2.
That should report that swap is encrypted when it is encrypted with plain
dm-crypt.
Sincerely,
Huey Chen
-- System Information:
Debian Release: 13.0
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.15-rt-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages fwupd depends on:
ii libarchive13t64 3.7.4-3
ii libblkid1 2.41-5
ii libc6 2.41-9
ii libcbor0.10 0.10.2-2
ii libcurl3t64-gnutls 8.15.0~rc1-1exp1
ii libdrm-amdgpu1 2.4.124-2
ii libdrm2 2.4.124-2
ii libflashrom1 1.4.0-3
ii libfwupd3 2.0.12-1
ii libglib2.0-0t64 2.84.3-1
ii libgnutls30t64 3.8.9-2
ii libjcat1 0.2.3-1
ii libjson-glib-1.0-0 1.10.6+ds-2
ii liblzma5 5.8.1-1
ii libmbim-glib4 1.33.1-1
ii libmbim-proxy 1.33.1-1
ii libmm-glib0 1.25.1-1
ii libpolkit-gobject-1-0 126-2
ii libprotobuf-c1 1.5.1-1
ii libqmi-glib5 1.37.1-1
ii libqmi-proxy 1.37.1-1
ii libsqlite3-0 3.46.1-6
ii libsystemd0 257.6-1
ii libtss2-esys-3.0.2-0t64 4.1.3-1.2
ii libusb-1.0-0 2:1.0.29-1
ii libxmlb2 0.3.22-1
ii shared-mime-info 2.4-5+b2
ii systemd [systemd-sysusers] 257.6-1
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
Versions of packages fwupd recommends:
ii bolt 0.9.8-1
ii dbus [default-dbus-system-bus] 1.16.2-2
ii dbus-broker [dbus-system-bus] 37-1
ii fwupd-amd64-signed [fwupd-signed] 1:1.7+1
ii jq 1.8.0-1
ii python3 3.13.4-1
ii udisks2 2.10.90-1
Versions of packages fwupd suggests:
pn gir1.2-fwupd-2.0 <none>
-- Configuration Files:
/etc/fwupd/fwupd.conf
[fwupd]
# use `man 5 fwupd.conf` for documentation
/etc/fwupd/remotes.d/lvfs-testing.conf changed:
[fwupd Remote]
Enabled=true
Title=Linux Vendor Firmware Service (testing)
MetadataURI=https://cdn.fwupd.org/downloads/firmware-testing.xml.zst
PrivacyURI=https://lvfs.readthedocs.io/en/latest/privacy.html
ReportURI=
FirmwareBaseURI=https://fwupd.org/downloads
OrderBefore=lvfs
AutomaticReports=false
ApprovalRequired=false
/etc/fwupd/remotes.d/lvfs.conf changed:
[fwupd Remote]
Enabled=false
Title=Linux Vendor Firmware Service
MetadataURI=https://cdn.fwupd.org/downloads/firmware.xml.zst
ReportURI=
PrivacyURI=https://lvfs.readthedocs.io/en/latest/privacy.html
FirmwareBaseURI=https://fwupd.org/downloads
AutomaticReports=false
AutomaticSecurityReports=false
ApprovalRequired=false
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: fwupd
Source-Version: 2.1.7-1
Done: Mario Limonciello <[email protected]>
We believe that the bug you reported is fixed in the latest version of
fwupd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mario Limonciello <[email protected]> (supplier of updated fwupd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 27 Jul 2026 16:00:45 -0500
Source: fwupd
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2.1.7-1
Distribution: unstable
Urgency: medium
Maintainer: Debian EFI <[email protected]>
Changed-By: Mario Limonciello <[email protected]>
Closes: 1108201 1137540 1139344 1141569 1141921 1141944 1142129
Changes:
fwupd (2.1.7-1) unstable; urgency=medium
.
* New upstream version (2.1.7)
* Merge packaging with upstream.
- Update python package deps (Closes: #1141944)
- Update shebang (Closes: #1141921)
- Detects unencrypted swap in more situations (Closes: #1108201)
- Don't show errors from fwupd-refresh.service (Closes: #1141569, #1139344)
- Don't show warnings for version command (Closes: #1137540)
- Fixes regression in d/control (Closes: #1142129)
Checksums-Sha1:
625002ed8366b328b77b1dca52fc65d69772c48e 3557 fwupd_2.1.7-1.dsc
2c70ac202d4e653871daf1ca2bdcaabacbeb061c 7127883 fwupd_2.1.7.orig.tar.gz
0728b4e0407366f3c6656d8b044595788f741cb6 30464 fwupd_2.1.7-1.debian.tar.xz
20fc5dbdee01492194e509dc00a810ee950915b2 17930 fwupd_2.1.7-1_source.buildinfo
Checksums-Sha256:
27dea9e5322708f23b3b650b7373657061a4469d3d129016f7b8841d58fcc1f0 3557
fwupd_2.1.7-1.dsc
338ea5b139f9a37447ff2215d0a8d2cf23851fb5a39fba7b1b0ded52a40240cc 7127883
fwupd_2.1.7.orig.tar.gz
bd20a926e68c97102113859b19e59d734eabf70bbaae4c095608bdd46365b7dc 30464
fwupd_2.1.7-1.debian.tar.xz
57894a4e76351b86fdf0780dae42f4cc27cc751803b785d45b256977870214ed 17930
fwupd_2.1.7-1_source.buildinfo
Files:
d09229c8351bdfdbd0445340c0816403 3557 admin optional fwupd_2.1.7-1.dsc
e113d1ffd2898bbccb6729ae7867f1d2 7127883 admin optional fwupd_2.1.7.orig.tar.gz
70ea165c2509cdd34c28807b6a708cfb 30464 admin optional
fwupd_2.1.7-1.debian.tar.xz
092799c47af28c0731ad5e24658a50f2 17930 admin optional
fwupd_2.1.7-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=lQaA
-----END PGP SIGNATURE-----
pgp2NZJHrZamJ.pgp
Description: PGP signature
--- End Message ---
