Accepting request 972887 from security

please stage with a link of GNUTLS to see if it works now



- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)

- use https url

- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch

OBS-URL: https://build.opensuse.org/request/show/972887
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libkcapi?expand=0&rev=8

libkcapi-1.2.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:782430512195f146e0e16e6bb689d9a7e61387afcfedc4340c433284b8b66049
-size 318948

libkcapi-1.2.0.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEO8xD1NLIfReEtp7kQh7pNjJqwVsFAl7K1MMACgkQQh7pNjJq
-wVueDgf/SEJfcgYYYcnND38nawuTXequkiq5TrhAb7AY/kx6LDQzXLRHlqLvjppV
-QMUQyiiLypo+NF/qrsLhyGi2IwRePaieLfXTZWcE4eO/sqss9CbYsUtk7bcByFvG
-YEDjTYooZU4NYx3WtpwegKF+ImBLmadDDbfkcGWcmNG5EEnh1Rtw0agg/5BxCxKy
-F5aEdXWs/mU6CxgDi2EFT+8FAD2Lv80Kpn0qWAVWb03IbtzvAZ36CzP4lEywDqV2
-lZq3hZeOvBecjmGDFthMNB0CfknCHdPYvEhXuR6cSiYrmY3heUeS6Py1cPosab3A
-xDePoFm3iYY4nALhCWOfp2/vPhZtgw==
-=ZgIv
------END PGP SIGNATURE-----

libkcapi-1.4.0.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEO8xD1NLIfReEtp7kQh7pNjJqwVsFAmISvaAACgkQQh7pNjJq
+wVv6jggAh7UpchOXZ1THbDZ0PE+YGWSr3Y3qKHMls9ixNn/RDSYxPvyZqc6pIAKQ
+zVA6bGtB9kqcSexmrk2EyiUYgi1lo+5HwsfAfHBQaq7vD1S8Q/FYx/XVRv2GQfkj
+/E1ivlcdcInlpn+vu+7Hei+H/IXtETh8QPwGwRI1Je84pIt7K4K4VPwWpur0su6E
+oF1AFT6ldlMczsoDTCi3eP3rZWKvMmX5718W9F6eKuTkKoIiipCUxdMBy4f6YpDB
+1ZmQPHjSgG4URlclQnFiGXYAbMBRHYfguJRl/HjZWSQMigRzqGSdvJR8wrfMeQzr
+Bk0z0nGayzHgcC7gPz8CsAMJj5C9eQ==
+=OA3o
+-----END PGP SIGNATURE-----

libkcapi.changes

@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Tue Apr 26 12:45:21 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- Update to version 1.4.0
+  * fix: ensure that LTO is supported (by Simo Sorce)
+  * fix: add LTO regression testing (by Ondrej Mosnacek)
+  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
+  * enhancement: add SM4 convenience functions
+  * fix: support AEAD encryption of arbitrary size with kcapi-enc
+- removed libkcapi-fix-lto.patch (upstream)
+
+-------------------------------------------------------------------
+Tue Apr 26 12:44:40 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- use https url
+
+-------------------------------------------------------------------
+Tue Jul 27 08:03:48 UTC 2021 - Andreas Schneider <asn@cryptomilk.org>
+
+- Update to version 1.3.1
+  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
+  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
+  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
+  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
+  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
+    library does not store any sensitive data in data structures it owns, such
+    security precautions may not be necessary considering the benefit of
+    allowing regular debugging
+  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
+    used
+  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
+  * enhancement: the variable types are changed from int32_t to ssize_t and
+    from uint32_t to size_t to match common POSIX and Linux APIs
+- Added libkcapi-fix-lto.patch
+
 -------------------------------------------------------------------
 Mon Aug 31 13:30:58 UTC 2020 - Dirk Mueller <dmueller@suse.com>
 

libkcapi.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libkcapi
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,12 +17,12 @@
 
 
 Name:           libkcapi
-Version:        1.2.0
+Version:        1.4.0
 Release:        0
 Summary:        Linux Kernel Crypto API User Space Interface Library
 License:        GPL-2.0-only
 Group:          Productivity/Security
-URL:            http://www.chronox.de/libkcapi.html
+URL:            https://www.chronox.de/libkcapi.html
 Source:         https://www.chronox.de/libkcapi/libkcapi-%{version}.tar.xz
 Source1:        https://www.chronox.de/libkcapi/libkcapi-%{version}.tar.xz.asc
 Source2:        libkcapi.keyring
@@ -73,7 +73,7 @@ Group:          Development/Tools/Other
 libkcapi user space tools to access certain hash algorithms.
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
 autoreconf -i
@@ -89,7 +89,7 @@ autoreconf -i
 make %{?_smp_mflags}
 
 %install
-make install DESTDIR=%{buildroot} LIBDIR="%{_libdir}" BINDIR=/%{_libexecdir}/libkcapi/ %{?_smp_mflags} 
+make install DESTDIR=%{buildroot} LIBDIR="%{_libdir}" BINDIR=/%{_libexecdir}/libkcapi/ %{?_smp_mflags}
 rm %{buildroot}/%_libdir/libkcapi.la
 
 mkdir -p %{buildroot}/%{_libexecdir}/libkcapi/