From c4fb430598756902b8fa30dc76a4b54866d4580e Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Fri, 12 Jun 2026 08:26:35 +0900 Subject: [PATCH 1/6] Release Notes: Add CVE identifiers for the fixes issues --- doc/html/en/Release Notes.html | 2 ++ doc/html/ru/Release Notes.html | 2 ++ doc/html/zh-cn/Release Notes.html | 4 +++- 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/html/en/Release Notes.html b/doc/html/en/Release Notes.html index b72b6f8cab..0ab517bfe3 100644 --- a/doc/html/en/Release Notes.html +++ b/doc/html/en/Release Notes.html @@ -50,6 +50,7 @@

Release Notes

  • Security: Fix GHSA-94c6-mgmv-mqc5: non-default WOLFCRYPT=1 builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count.
  • Fix CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling and Whirlpool alignment.
    • @@ -65,6 +66,7 @@

    Release Notes

  • Harden Windows driver input validation and crash dump filter handling (GH PR #1590).
    • diff --git a/doc/html/ru/Release Notes.html b/doc/html/ru/Release Notes.html index d77ec7c730..5b242ec758 100644 --- a/doc/html/ru/Release Notes.html +++ b/doc/html/ru/Release Notes.html @@ -53,6 +53,7 @@

    История версий

  • Безопасность: исправлена GHSA-94c6-mgmv-mqc5: сборки с неиспользуемым по умолчанию параметром WOLFCRYPT=1 теперь используют PBKDF2 из wolfCrypt вместо HKDF и учитывают заданное в VeraCrypt число итераций PBKDF2.
  • Исправлены определение возможностей процессора и граничные случаи криптографических реализаций, включая определение AVX2/leaf 7, резервные пути BLAKE2s/Argon2 для x86 без SSE2, диспетчеризацию Camellia SSSE3, обработку хвоста многоблочных операций Twofish x64 и выравнивание Whirlpool.
    • @@ -68,6 +69,7 @@

    История версий

  • Усилены проверка входных данных драйвера Windows и обработка фильтра аварийных дампов (GH PR #1590).
    • diff --git a/doc/html/zh-cn/Release Notes.html b/doc/html/zh-cn/Release Notes.html index 62e0f195bc..82bc0561e7 100644 --- a/doc/html/zh-cn/Release Notes.html +++ b/doc/html/zh-cn/Release Notes.html @@ -50,6 +50,7 @@

    发行说明

  • 安全：修复 GHSA-94c6-mgmv-mqc5：非默认启用的 WOLFCRYPT=1 构建现在使用 wolfCrypt PBKDF2 而非 HKDF，并使用 VeraCrypt 的 PBKDF2 迭代次数。
  • 修复 CPU 特性检测和加密实现中的边界情况，包括 AVX2/leaf 7 检测、x86 无 SSE2 构建中的 BLAKE2s/Argon2 后备路径、Camellia SSSE3 调度、Twofish x64 多块尾部处理以及 Whirlpool 对齐。
    • @@ -64,7 +65,8 @@

    发行说明

  • 安全：修复 GHSA-jjcr-75w7-58jp：隐藏卷快速格式化不再使用文件容器快速分配方法；该方法曾每隔 128 MiB 写入明文零扇区。此修复保持似是而非的否认性。
  • 增强 Windows 驱动程序输入验证和崩溃转储过滤处理（GH PR #1590）。
    • From e5415498f481e56a8f79e49740d160dbf5da54c1 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Fri, 12 Jun 2026 16:03:24 +0900 Subject: [PATCH 2/6] Add hidden volume container warning to release notes --- doc/html/en/Release Notes.html | 5 +++++ doc/html/ru/Release Notes.html | 5 +++++ doc/html/zh-cn/Release Notes.html | 5 +++++ 3 files changed, 15 insertions(+) diff --git a/doc/html/en/Release Notes.html b/doc/html/en/Release Notes.html index 0ab517bfe3..924d9f0160 100644 --- a/doc/html/en/Release Notes.html +++ b/doc/html/en/Release Notes.html @@ -39,6 +39,11 @@

    Release Notes

    To avoid hinting whether your volumes contain a hidden volume or not, or if you depend on plausible deniability when using hidden volumes/OS, then you must recreate both the outer and hidden volumes including system encryption and hidden OS, discarding existing volumes created prior to 1.18a version of VeraCrypt.

    +

    +Warning to users who created hidden volumes inside file containers using VeraCrypt 1.26.6 through 1.26.28:
    +A security issue fixed in VeraCrypt 1.26.29 may affect the plausible deniability of these hidden volumes. If you rely on plausible deniability, you should recreate the affected outer file container and its hidden volume using VeraCrypt 1.26.29 or later, then securely erase the old container. +

    +

    1.26.29 (June 9th, 2026):