8ed6aff828
- Fix for bsc#1221255: * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch OBS-URL: https://build.opensuse.org/request/show/1172950 OBS-URL: https://build.opensuse.org/package/show/security:chipcard/pam_pkcs11?expand=0&rev=37
196 lines
6.6 KiB
Plaintext
196 lines
6.6 KiB
Plaintext
-------------------------------------------------------------------
|
|
Tue May 7 15:19:11 UTC 2024 - Davide Benini <davide.benini@suse.com>
|
|
|
|
- Fix for bsc#1221255:
|
|
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 29 14:54:54 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Use %autosetup macro. Allows to eliminate the usage of deprecated
|
|
%patchN.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 16 09:31:59 UTC 2023 - Stefan Schubert <schubi@suse.com>
|
|
|
|
- Migration of PAM settings to /usr/lib/pam.d.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 29 08:49:15 UTC 2022 - pgajdos@suse.com
|
|
|
|
- use pam rpm macros [bsc#1190957]
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Jan 15 10:26:28 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
- update to 0.6.12:
|
|
* Limit signature length to 65536 bytes
|
|
* A number of bug fixes and OpenSSL compatibility updates
|
|
* console output color updates
|
|
* Add support of ECDSA signature in addition to RSA
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 14 10:34:54 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
|
|
|
- Added hardening to systemd service(s) (bsc#1181400). Modified:
|
|
* pkcs11_eventmgr.service
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 29 22:45:28 CET 2019 - sbrabec@suse.com
|
|
|
|
- Update to version 0.6.10:
|
|
* Fix some security issues (thx @frankmorgner):
|
|
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
|
|
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
|
|
0002-fixed-buffer-overflow-with-long-home-directory.patch,
|
|
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
|
|
* Fix buffer overflow with long home directory.
|
|
* Fix wiping secrets (now using OpenSSL_cleanse()).
|
|
* Verify using a nonce from the system, not the card.
|
|
* Fix segfalt when checking CRLs
|
|
(drop pam_pkcs11-crl-check.patch).
|
|
- Add rcpkcs11_eventmgr service symlink.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 17 10:12:31 UTC 2018 - vcizek@suse.com
|
|
|
|
- Address security issues found by X41 D-Sec audit (bsc#1105012)
|
|
* Authentication Replay
|
|
* Buffer Overflow
|
|
* Memory not cleaned properly before free()
|
|
- add patches:
|
|
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
|
|
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
|
|
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 23 17:36:18 CEST 2018 - sbrabec@suse.com
|
|
|
|
- Fix segfault and fetch problems when checking CRLs
|
|
(pam_pkcs11-crl-check.patch).
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 10 00:08:17 UTC 2017 - jengelh@inai.de
|
|
|
|
- Repair bulletpoint that skidded in description.
|
|
Trim description of %name-devel-doc, it does not cotain
|
|
the programs.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 9 15:08:07 UTC 2017 - astieger@suse.com
|
|
|
|
- add service file bsc#1049219
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 20 18:02:57 CEST 2017 - sbrabec@suse.com
|
|
|
|
- Updated to version 0.6.9:
|
|
* Upstream web moved.
|
|
* pkcs11_listcerts: Do not fail on certificate error.
|
|
* Do not fail if card was already unlocked.
|
|
* Other bug fixes.
|
|
* Translation updates.
|
|
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
|
|
- Work around incorrect upstream release process not calling
|
|
"make dist".
|
|
- Split API documentation into a separate package
|
|
pam_pkcs11-devel-doc.
|
|
- Add pam_pkcs11-fsf-address.patch.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 9 19:02:43 UTC 2016 - antoine.belvire@laposte.net
|
|
|
|
- Fix build for Tumbleweed:
|
|
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
|
|
* Rebuild configure with the bootstrap script (add libtool as
|
|
build dependency)
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 10 17:24:56 CEST 2012 - sbrabec@suse.cz
|
|
|
|
- Updated to version 0.6.8:
|
|
* Code cleanup.
|
|
* Bug fixes.
|
|
* Translation updates.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 28 19:54:16 CET 2012 - sbrabec@suse.cz
|
|
|
|
- Change nssdb path to /etc/pki/nssdb (bnc#463469).
|
|
- Make libdir paths in pam_pkcs11.conf biarch-wise.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 5 18:40:44 CET 2011 - sbrabec@suse.cz
|
|
|
|
- Updated to version 0.6.6:
|
|
* Compatible with pcsc-lite-1.6.
|
|
* New mapper API.
|
|
* Minor fixes.
|
|
* Translaton updates.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 1 12:20:03 UTC 2010 - jengelh@medozas.de
|
|
|
|
- package baselibs.conf
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 5 15:55:31 CEST 2009 - sbrabec@suse.cz
|
|
|
|
- Updated to version 0.6.1:
|
|
* Added functions to API.
|
|
* Fixes from openSUSE packages upstreamed.
|
|
* Minor fixes.
|
|
* Translaton updates.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 25 12:41:19 CEST 2009 - sbrabec@suse.cz
|
|
|
|
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 15 18:30:29 CEST 2008 - sbrabec@suse.cz
|
|
|
|
- Fixed all implicit declarations.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 23 17:49:42 CEST 2008 - sbrabec@suse.cz
|
|
|
|
- Fixed uninitialized variable (bnc#351207).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
|
|
|
|
- added baselibs.conf file to build xxbit packages
|
|
for multilib support
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 6 21:08:43 CEST 2007 - jberkman@novell.com
|
|
|
|
- use the same directory for nssdb as the kerberos pkinit plugin
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 31 17:34:21 CEST 2007 - sbrabec@suse.cz
|
|
|
|
- Build with NSS instead of openssl.
|
|
- Applied patches from Jacob Berkman: MS UPN OID and NSS
|
|
configuration.
|
|
- Fixed implicit declaration.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 26 14:32:24 CEST 2007 - sbrabec@suse.cz
|
|
|
|
- Updated to version 0.6.0:
|
|
* compiler warning fixes
|
|
* I18N support
|
|
* new configuration options
|
|
* support for new environment variables
|
|
* new tool pkcs11_setup
|
|
* support for the NSS crypto libraries (off by default)
|
|
* for more changes see ChangeLog.svn
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 12 16:18:38 CEST 2006 - sbrabec@suse.cz
|
|
|
|
- New SuSE package, version 0.5.3.
|
|
|