2024-02-26 15:57:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Feb 26 10:49:23 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 1.6.6:
|
|
|
|
* Fix a possible wrong error return from the DER builder. [T6992]
|
|
|
|
* Release-info: https://dev.gnupg.org/T7009
|
|
|
|
* Update upstream libksba.keyring
|
|
|
|
|
2023-11-17 12:13:49 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Nov 17 09:41:33 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 1.6.5:
|
|
|
|
* Add Brainpool curve detection using parameters with compressed
|
|
|
|
base point. [rKeb23f853f178]
|
|
|
|
* New configure option --with-libtool-modification. [T6619]
|
|
|
|
* Release-info: https://dev.gnupg.org/T6822
|
|
|
|
|
2023-10-25 16:33:43 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Oct 17 10:27:15 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Do not pull revision info from GIT when autoconf is run. This
|
|
|
|
removes the -unknown suffix after the version number.
|
|
|
|
* Run autoreconf for the added patch and add the build
|
|
|
|
dependecies on autoconf, automake and libtool.
|
|
|
|
* Add libksba-nobetasuffix.patch [bsc#1216334]
|
|
|
|
|
2023-06-20 09:18:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jun 20 07:10:20 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 1.6.4:
|
|
|
|
* Correctly detect CMS write errors. [rK9ced7706f2]
|
|
|
|
* Release-info: https://dev.gnupg.org/T6543
|
|
|
|
|
2022-10-17 15:24:06 +02:00
|
|
|
-------------------------------------------------------------------
|
2023-01-03 09:38:15 +01:00
|
|
|
Fri Dec 23 08:15:38 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
- update to 1.6.3 (bsc#1206579, CVE-2022-47629):
|
|
|
|
* Fix another integer overflow in the CRL parser.
|
|
|
|
Release-info: https://dev.gnupg.org/T6304
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2022-10-17 15:24:06 +02:00
|
|
|
Mon Oct 17 12:45:32 UTC 2022 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- libksba 1.6.2: [bsc#1204357, CVE-2022-3515]
|
|
|
|
* Fix integer overflow in the CRL parser.
|
|
|
|
|
2022-09-18 20:32:42 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Sep 18 09:55:37 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- libksba 1.6.1:
|
|
|
|
* Allow an OCSP server not to return the sent nonce
|
|
|
|
- fix rpmlint warnings
|
|
|
|
|
2021-06-14 09:45:09 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 11 13:28:18 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- libksba 1.6.0:
|
|
|
|
* Limited support for the Authenticated-Enveloped-Data
|
|
|
|
content type.
|
|
|
|
* Support password based decryption.
|
|
|
|
* Silence warnings from static analyzers.
|
|
|
|
* Interface changes relative to the 1.5.0 release:
|
|
|
|
- KSBA_CT_AUTHENVELOPED_DATA NEW.
|
|
|
|
|
2021-04-12 11:02:58 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 7 18:58:34 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- libksba 1.5.1:
|
|
|
|
* Support Brainpool curves specified by ECDomainParameters
|
|
|
|
|
2020-11-26 10:59:18 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Nov 20 18:49:02 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- libksba 1.5.0:
|
|
|
|
* ksba_cms_identify now identifies OpenPGP keyblock content
|
|
|
|
* Supports TR-03111 plain format ECDSA signature verification
|
|
|
|
* Fixes a CMS signed data parser bug exhibited by a somewhat
|
|
|
|
strange CMS message
|
|
|
|
- remove deprecated texinfo macros and update signing keyring
|
|
|
|
|
2020-05-21 13:02:54 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed May 20 07:47:55 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- libksba 1.4.0:
|
|
|
|
* Supports ECDSA and EdDSA certificate creation and parsing.
|
|
|
|
* Supports ECDH enveloped data.
|
|
|
|
* Supports ECDSA and EdDSA signed data.
|
|
|
|
* Supports rsaPSS signature verification.
|
|
|
|
* Supports standard file descriptors in ksba_reader_read.
|
|
|
|
* Allows for optional elements in keyinfo objects.
|
|
|
|
* Fixes error detection in the CMS parser.
|
|
|
|
* Fixes memory leak in ksba_cms_identify.
|
|
|
|
* New constants KSBA_VERSION and KSBA_VERSION_NUMBER.
|
|
|
|
* New API to make creation of DER objects easy.
|
|
|
|
* Interface changes relative to the 1.3.5 release:
|
|
|
|
KSBA_VERSION NEW.
|
|
|
|
KSBA_VERSION_NUMBER NEW.
|
|
|
|
KSBA_CT_SPC_IND_DATA_CTX NEW.
|
|
|
|
KSBA_CLASS_* NEW.
|
|
|
|
KSBA_TYPE_* NEW.
|
|
|
|
ksba_der_t NEW.
|
|
|
|
ksba_der_release NEW.
|
|
|
|
ksba_der_builder_new NEW.
|
|
|
|
ksba_der_builder_reset NEW.
|
|
|
|
ksba_der_add_ptr NEW.
|
|
|
|
ksba_der_add_val NEW.
|
|
|
|
ksba_der_add_int NEW.
|
|
|
|
ksba_der_add_oid NEW.
|
|
|
|
ksba_der_add_bts NEW.
|
|
|
|
ksba_der_add_der NEW.
|
|
|
|
ksba_der_add_tag NEW.
|
|
|
|
ksba_der_add_end NEW.
|
|
|
|
ksba_der_builder_get NEW.
|
|
|
|
|
2018-02-26 10:33:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 22 15:10:36 UTC 2018 - fvogt@suse.com
|
|
|
|
|
|
|
|
- Use %license (boo#1082318)
|
|
|
|
|
2016-08-22 22:03:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 22 19:58:46 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- libksba 1.3.5:
|
|
|
|
* Limit the allowed size of complex ASN.1 objects (e.g.
|
|
|
|
certificates) to 16MiB.
|
|
|
|
* Avoid read access to unitialized memory.
|
|
|
|
* Improve detection of invalid RDNs.
|
|
|
|
* Encode the OCSP nonce value as an octet string as described by
|
|
|
|
RFC-6960.
|
|
|
|
|
2016-05-12 09:44:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue May 10 11:25:34 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- libksba 1.3.4:
|
|
|
|
* Fixed two OOB read access bugs which could be used to force a DoS.
|
|
|
|
boo#979261 CVE-2016-4574, CVE-2016-4579
|
|
|
|
* Fixed a crash due to faulty curve OID lookup code.
|
|
|
|
* Synced the list of supported curves with those of Libgcrypt.
|
|
|
|
* New configure option --enable-build-timestamp; a build timestamp is
|
|
|
|
not anymore used by default.
|
|
|
|
|
2015-04-10 23:16:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Apr 10 20:28:31 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- libksba 1.3.3:
|
|
|
|
* Fixed an integer overflow in the DN decoder.
|
|
|
|
* Now returns an error instead of terminating the process for
|
|
|
|
certain bad BER encodings.
|
|
|
|
* Improved the parsing of utf-8 strings in DNs.
|
|
|
|
* Allow building with newer versions of Bison.
|
|
|
|
|
2015-03-20 16:42:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 19 16:38:50 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- remove libtool requirement
|
|
|
|
|
2014-11-25 22:45:44 +01:00
|
|
|
-------------------------------------------------------------------
|
2014-11-26 09:21:12 +01:00
|
|
|
Wed Nov 26 08:20:23 UTC 2014 - andreas.stieger@gmx.de
|
2014-11-25 22:45:44 +01:00
|
|
|
|
2014-11-26 09:21:12 +01:00
|
|
|
- libksba 1.3.2 [boo#907074] [CVE-2014-9087]
|
2014-11-26 09:16:43 +01:00
|
|
|
This version contains a security update which fixes a buffer
|
|
|
|
overflow in OID to string conversion code that can be triggered
|
|
|
|
by a specially crafted S/MIME message or ECC based OpenPGP data.
|
|
|
|
Users of GnuPG 2.x should install this version and restart the
|
2014-11-25 22:45:44 +01:00
|
|
|
dirmgr process.
|
|
|
|
* Fixed a buffer overflow in ksba_oid_to_str.
|
|
|
|
- verify source signature
|
|
|
|
|
2014-09-22 15:00:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Sep 21 21:07:02 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- libksba 1.3.1:
|
|
|
|
* Fixed memory leak in CRL parsing
|
|
|
|
* Build fixes for ppc64el
|
|
|
|
|
2012-11-27 15:56:35 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 27 14:57:15 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
- Use URL for source
|
|
|
|
|
2012-09-28 10:59:40 +02:00
|
|
|
-------------------------------------------------------------------
|
2012-10-01 21:04:45 +02:00
|
|
|
Mon Oct 1 18:59:20 UTC 2012 - andreas.stieger@gmx.de
|
2012-09-28 10:59:40 +02:00
|
|
|
|
|
|
|
- update to libksba 1.3.0
|
|
|
|
- change license from GPLv2 to LGPLv3/GPLv2
|
|
|
|
- minor bug fixes
|
|
|
|
- implement shared library packaging policy
|
2012-10-01 21:04:45 +02:00
|
|
|
- remove nld-build.diff which was added 2004 before package was in
|
|
|
|
the openSUSE OBS, was never used or applied cleanly since r1
|
2012-09-28 10:59:40 +02:00
|
|
|
|
2011-11-21 10:33:48 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Nov 19 20:38:30 UTC 2011 - coolo@suse.com
|
|
|
|
|
|
|
|
- add libtool as buildrequire to avoid implicit dependency
|
|
|
|
|
2011-07-29 18:02:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jul 29 15:58:31 UTC 2011 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to libksba-1.2.0
|
|
|
|
- New functions to allow the creation of X.509 certificates.
|
|
|
|
- Interface changes relative to the 1.1.0 release:
|
|
|
|
ksba_certreq_set_serial NEW
|
|
|
|
ksba_certreq_set_issuer NEW
|
|
|
|
ksba_certreq_set_validity NEW
|
|
|
|
ksba_certreq_set_siginfo NEW
|
|
|
|
|
2010-12-03 13:01:36 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 3 12:00:34 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to libksba-1.1.0
|
|
|
|
* New functions to fix a leak in dirmngr.
|
|
|
|
* Interface changes relative to the 1.0.0 release:
|
|
|
|
ksba_reader_set_release_notify NEW
|
|
|
|
ksba_writer_set_release_notify NEW
|
|
|
|
- clean up specfile
|
|
|
|
|
2010-11-01 09:28:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Oct 31 12:37:02 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Use %_smp_mflags
|
|
|
|
|
2010-08-24 17:38:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Aug 17 11:44:51 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to libksba-1.0.8
|
|
|
|
* Fixed a CMS parsing bug exhibited by Lotus Notes.
|
|
|
|
|
2009-07-10 16:43:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jul 9 17:02:39 CEST 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to libksba-1.0.7
|
|
|
|
* Detect overflow while parsing OIDs. Map BER encoded OIDs to well
|
|
|
|
known names.
|
|
|
|
* Allow mixed case names in DNs.
|
|
|
|
|
2009-06-29 16:17:34 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jun 24 18:07:00 CEST 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to libksba-1.0.6
|
|
|
|
* Support SHA-{384,512} based signature generation.
|
|
|
|
* The RSA algorithmIdentifier ASN.1 sequence is now emitted with an
|
|
|
|
explicit NULL parameter. Despite the interop testing we did in the
|
|
|
|
past, some software still requires this and thus we better follow
|
|
|
|
the best current practise.
|
|
|
|
|
2009-04-18 14:01:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 7 14:32:06 CEST 2009 - crrodriguez@suse.de
|
|
|
|
|
|
|
|
- remove static libraries and "la" files
|
|
|
|
- fix buildrequires and -devel package dependencies
|
|
|
|
|
2009-01-14 01:47:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jan 12 12:21:34 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to 1.0.5 (bugfix release)
|
|
|
|
- minor bugfixes
|
|
|
|
|
2008-09-26 14:58:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 25 11:13:15 CEST 2008 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to 1.0.4
|
|
|
|
* autoconf fixes
|
|
|
|
- correctly install/uninstall info files
|
|
|
|
- use %makeinstall and %configure macros
|
|
|
|
|
2008-06-26 16:56:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 26 15:55:01 CEST 2008 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to 1.0.3
|
|
|
|
* bugfix release (autoconf fixes)
|
|
|
|
* removed libksba-texi.patch
|
|
|
|
|
2008-01-12 02:54:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jan 10 18:21:20 CET 2008 - bk@suse.de
|
|
|
|
|
|
|
|
- Add missing initialsation, fixes gpgsm crash in GPG's make check
|
|
|
|
|
2007-08-02 22:35:06 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 30 15:19:09 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- update to 1.0.2
|
|
|
|
* Support for SHA-2.
|
|
|
|
* Fixed a couple of memory leaks.
|
|
|
|
* Experimental support for ECDSA.
|
|
|
|
* Minor portability fixes.
|
|
|
|
* Switched to GPLv3.
|
|
|
|
|
2007-01-16 00:22:18 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 12 13:54:08 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- updated to 1.0.0 by diff from author
|
|
|
|
- change in api
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 11 15:30:15 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- updated to 0.9.16
|
|
|
|
Fixed a character set conversion bug in BMPStrings
|
|
|
|
Added new api functions, see readme.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 23 17:48:21 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- updated to 0.9.15 from CVS!
|
|
|
|
fixed security bug #177462
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu May 25 11:41:24 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- updated to version 0.9.14
|
|
|
|
* Fixed broken OCSP requests.
|
|
|
|
* Ignore invalid bytes appended to a certificate.
|
|
|
|
* New functions to associate user data with a certificate object.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 25 21:37:31 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 26 22:38:05 CEST 2005 - mls@suse.de
|
|
|
|
|
|
|
|
- make devel package require base package
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Aug 5 12:52:01 CEST 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- updated to version 0.9.12
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 11 18:45:05 CEST 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- updated to version 0.9.11
|
|
|
|
- removed obsoleted patch autoconf-fix.diff
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 12 14:39:35 CET 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- update to version 0.9.10
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 30 16:45:59 CEST 2004 - postadal@suse.cz
|
|
|
|
|
|
|
|
- restored autoconf-fix.diff patch removed by last update [#36193, #46036]
|
|
|
|
(fixed autoconf issue - quoted definition of AM_PATH_KSBA)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 28 12:12:29 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- update to version 0.9.8
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 14 11:52:34 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- create -devel sub package
|
|
|
|
- prepare for nld
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 12 16:30:05 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- update to version 0.9.7
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Mar 17 18:03:59 CET 2004 - postadal@suse.cz
|
|
|
|
|
|
|
|
- fixed autoconf issue (quoted definition of AM_PATH_KSBA) [#36193]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 10 11:53:19 CET 2004 - postadal@suse.cz
|
|
|
|
|
|
|
|
- fixed code that broke strict aliasing
|
|
|
|
- bziped tarball
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Jan 11 11:25:05 CET 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- add %run_ldconfig
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 2 16:38:16 CEST 2003 - mc@suse.de
|
|
|
|
|
|
|
|
- switch to version 0.4.7
|
|
|
|
This fixes a problem mainly relevant to certificate request
|
|
|
|
creation (if you must use the ugly way of putting the email
|
|
|
|
address into the subject DN)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 20 18:49:13 CET 2003 - mc@suse.de
|
|
|
|
|
|
|
|
- initial version
|
|
|
|
|