v24

What's Changed

• dracut: fix some portability issues in non-systemd environments by @oxiez in #561
• dracut/tang: Order clevis-luks-askpass after network-online.target and more fixes by @rmetrich in #562
• build: Non-automagic pkcs11 pin support by @salahcoronya in #569
• fix: clevis-luks-list didn't show all configured bindings by @Cornelicorn in #570
• Add optional mTLS support to the tang pin by @liyue32 in #566
• Add libpcsclite_real.so to dracut initrd PKCS#11 module by @sarroutbi in #584
• luks: bypass pwquality for generated keys by @sergio-correia in #585
• guard against integer underflow in getpeername by @sarroutbi in #586
• tpm1: drop network dependency from dracut module by @oldium in #579
• pkcs11: drop legacy.so from dracut module by @oldium in #577
• luks: skip ext-token test when the keyring is unusable by @oldium in #578
• Fix compatibility with Ubuntu 22.04 by @lowjoel in #574
• tpm2: use explicit sessions for PCR policy authorization by @khalidfaisal17 in #573
• pkcs11: fix multiple credential exposure vulnerabilities by @sarroutbi in #588
• pkcs11: harden AF_UNIX socket daemon and credential handling by @sergio-correia in #589

New Contributors

• @oxiez made their first contribution in #561
• @salahcoronya made their first contribution in #569
• @Cornelicorn made their first contribution in #570
• @liyue32 made their first contribution in #566
• @lowjoel made their first contribution in #574
• @khalidfaisal17 made their first contribution in #573

Full Changelog: v23...v24