Accepting request 1171003 from home:aplanas:branches:security

- actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650)
- Update to version 0.2.4~39:
  * build(deps): bump openssl from 0.10.63 to 0.10.64
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump serde_json from 1.0.107 to 1.0.116
  * build(deps): bump actix-web from 4.4.1 to 4.5.1
  * crypto: Enable TLS 1.3
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump mio from 0.8.4 to 0.8.11
  * enable hex values to be used for tpm_ownerpassword
  * config: Support IPv6 with or without brackets
  * keylime: Implement a simple IP parser to remove brackets
  * crypto: Implement CertificateBuilder to generate certificates
  * tests: Fix coverage download by supporting arbitrary URL
  * cargo: Add testing feature to keylime library
  * Set X509 SAN with local DNSname/IP/IPv6
  * Include newest Node20 versions for Github actions
  * tpm: Add unit test for uncovered public functions
  * crypto: Implement ECC key generation support
  * crypto: Add test for match_cert_to_template()
  * Fix minor typo, format and remove end whitespaces
  * crypto: Make error types less specific
  * tests/run.sh: Run tarpaulin with a single thread
  * payloads: Remove explicit drop of channel transmitter
  * crypto: Move to keylime library
  * crypto: Add specific type for every possible error
  * tpm: Rename origin of error as source in structures
  * list_parser: Add source for error for backtrace
  * algorithms: Make errors more specific
  * typo fix for default path to measured boot log file
  * README: remove mentions of libarchive as a dependency
  * Dockerfile.wolfi: Update clang to version 17
  * docker: Remove libarchive as a dependency
  * rpm: Remove libarchive from dependencies
  * cargo: Replace compress-tools with zip crate
  * cargo: Bump ahash to version 0.8.7
  * build(deps): bump serde from 1.0.195 to 1.0.196
  * build(deps): bump libc from 0.2.152 to 0.2.153
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * docker: Install configuration file in the correct path
  * config: Make IAK/IDevID disabled by default

OBS-URL: https://build.opensuse.org/request/show/1171003
OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=67

_service

@@ -3,7 +3,8 @@
     <param name="url">https://github.com/keylime/rust-keylime.git</param>
     <param name="versionformat">@PARENT_TAG@~@TAG_OFFSET@</param>
     <param name="scm">git</param>
-    <param name="revision">v0.2.4</param>
+    <!-- <param name="revision">v0.2.4</param> -->
+    <param name="revision">master</param>
     <param name="match-tag">*</param>
     <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param>
     <param name="versionrewrite-replacement">\1</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/keylime/rust-keylime.git</param>
-              <param name="changesrevision">a744517f8cf77241e907e0e644bf26400fa2c255</param></service></servicedata>
+              <param name="changesrevision">547f1a8125c186586f474bd434c3a6a53a1ff82f</param></service></servicedata>

rust-keylime-0.2.4~0.tar.zst

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4a089bbe1afb460c0b12f556fd95d4892ffd98ac2a962783e0f7c7faf7e8eaff
-size 169754

rust-keylime-0.2.4~39.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:875fc25e508b04b26eb2af7ed40e6b326a94184d4e0387abce1923f83b4f296d
+size 177136

rust-keylime.changes

@@ -1,3 +1,48 @@
+-------------------------------------------------------------------
+Tue Apr 30 07:52:30 UTC 2024 - aplanas@suse.com
+
+- actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650)
+- Update to version 0.2.4~39:
+  * build(deps): bump openssl from 0.10.63 to 0.10.64
+  * build(deps): bump h2 from 0.3.24 to 0.3.26
+  * build(deps): bump serde_json from 1.0.107 to 1.0.116
+  * build(deps): bump actix-web from 4.4.1 to 4.5.1
+  * crypto: Enable TLS 1.3
+  * build(deps): bump tempfile from 3.9.0 to 3.10.1
+  * build(deps): bump mio from 0.8.4 to 0.8.11
+  * enable hex values to be used for tpm_ownerpassword
+  * config: Support IPv6 with or without brackets
+  * keylime: Implement a simple IP parser to remove brackets
+  * crypto: Implement CertificateBuilder to generate certificates
+  * tests: Fix coverage download by supporting arbitrary URL
+  * cargo: Add testing feature to keylime library
+  * Set X509 SAN with local DNSname/IP/IPv6
+  * Include newest Node20 versions for Github actions
+  * tpm: Add unit test for uncovered public functions
+  * crypto: Implement ECC key generation support
+  * crypto: Add test for match_cert_to_template()
+  * Fix minor typo, format and remove end whitespaces
+  * crypto: Make error types less specific
+  * tests/run.sh: Run tarpaulin with a single thread
+  * payloads: Remove explicit drop of channel transmitter
+  * crypto: Move to keylime library
+  * crypto: Add specific type for every possible error
+  * tpm: Rename origin of error as source in structures
+  * list_parser: Add source for error for backtrace
+  * algorithms: Make errors more specific
+  * typo fix for default path to measured boot log file
+  * README: remove mentions of libarchive as a dependency
+  * Dockerfile.wolfi: Update clang to version 17
+  * docker: Remove libarchive as a dependency
+  * rpm: Remove libarchive from dependencies
+  * cargo: Replace compress-tools with zip crate
+  * cargo: Bump ahash to version 0.8.7
+  * build(deps): bump serde from 1.0.195 to 1.0.196
+  * build(deps): bump libc from 0.2.152 to 0.2.153
+  * build(deps): bump reqwest from 0.11.23 to 0.11.24
+  * docker: Install configuration file in the correct path
+  * config: Make IAK/IDevID disabled by default
+
 -------------------------------------------------------------------
 Wed Jan 31 09:22:00 UTC 2024 - aplanas@suse.com
 

rust-keylime.obsinfo

@@ -1,4 +1,4 @@
 name: rust-keylime
-version: 0.2.4~0
+version: 0.2.4~39
-mtime: 1706692574
+mtime: 1714410441
-commit: a744517f8cf77241e907e0e644bf26400fa2c255
+commit: 547f1a8125c186586f474bd434c3a6a53a1ff82f

rust-keylime.spec

@@ -25,7 +25,7 @@
   %define _config_norepl %config(noreplace)
 %endif
 Name:           rust-keylime
-Version:        0.2.4~0
+Version:        0.2.4~39
 Release:        0
 Summary:        Rust implementation of the keylime agent
 License:        (Apache-2.0 OR MIT) AND BSD-3-Clause AND (Apache-2.0 OR MIT) AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR MIT OR Zlib) AND (MIT OR Unlicense) AND (Apache-2.0 OR Zlib OR MIT) AND Apache-2.0 AND Apache-2.0 WITH LLVM-exception AND BSD-3-Clause AND ISC AND MIT

vendor.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:6e2c709feed1c51af142ad0601cce4bfd587f2cbbcf0092ee8ad47cc7b193d2e
+oid sha256:ac1a5247d523eb3fec570c71e02b74e1f51f7006fec897c4db5fbf81402f8fbd
-size 34712428
+size 30506564