The release of VeraCrypt 1.26.30 has been published, continuing the development of the disk encryption system fork TrueCrypt, which has ceased to exist. VeraCrypt is notable for replacing the algorithm used in TrueCrypt, RIPEMD-160, with SHA-512 and SHA-256, increasing the number of hashing iterations, simplifying the build process for Linux and macOS, and addressing issues identified during the audit of TrueCrypt's source code. The code developed by the VeraCrypt project is distributed under the Apache 2.0 license, while the borrowings from TrueCrypt continue to be provided under the TrueCrypt License 3.0. Ready builds are available for Linux, FreeBSD, Windows, and macOS.
Among the changes in the new version:
- Several vulnerabilities have been fixed: Buffer overflow (CVE-2026-77372) when deserializing requests in a privileged service. Gaining root rights due to improper handling of temporary files in the /tmp directory by the installer. Leaving decrypted data after unmounting in macOS when using FUSE-T (CVE-2026-108982). Privilege escalation in the Windows version.
- Support has been added for writable partitions hosted in files on shared storage without root access (e.g., GVfs or NFS in root_squash mode).
- The mount.veracrypt script has been rewritten in POSIX shell.
- Improved cleaning of token data.
- In Linux, the handling of media in read-only mode has been enhanced.
- Protection against leakage to child processes of file descriptors related to privileged services and authentication has been added.
- CPU capabilities are determined before starting basic services to utilize hardware acceleration when working with mounted partitions.
- Support for the BLAKE2b-512 hash function has been added to the dialogs for generating key files, performance checking of hashes, and configuring the random number pool.
- In OpenBSD, the command line interface and graphical configurator have been enhanced to allow the creation of FFS partitions.
Source: opennet.ru
