- update to 0.9.5 - important changes: * fix denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value - CVE-2023-51775 (bsc#1220726) * Add RFC 8037 support: EdDSA for JWS with Ed25519 & Ed448 (needs Java 17) X25519 & X448 ECDH for JWE (needs Java 11) OKP (Octet Key Pair) type for JWK * Add support for the ES256K JWS alg (ECDSA using secp256k1 curve and SHA-256 per RFC8812) and the secp256k1 EC JWK crv * Add support for producing RFC9278 JWK Thumbprint URI values * more changes in the Release Notes https://bitbucket.org/b_c/jose4j/wiki/Release%20Notes - Remove: PBES2-check-iteration-count.patch - fix package group OBS-URL: https://build.opensuse.org/request/show/1153823 OBS-URL: https://build.opensuse.org/package/show/Java:packages/jose4j?expand=0&rev=6
14 lines
459 B
Plaintext
14 lines
459 B
Plaintext
<services>
|
|
<service mode="disabled" name="tar_scm">
|
|
<param name="url">https://bitbucket.org/b_c/jose4j.git</param>
|
|
<param name="scm">git</param>
|
|
<param name="versionformat">0.9.5</param>
|
|
<param name="revision">jose4j-0.9.5</param>
|
|
</service>
|
|
<service mode="disabled" name="set_version"/>
|
|
<service mode="disabled" name="recompress">
|
|
<param name="file">*.tar</param>
|
|
<param name="compression">gz</param>
|
|
</service>
|
|
</services>
|