Accepting request 1230584 from security

OBS-URL: https://build.opensuse.org/request/show/1230584
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tpm2-pkcs11?expand=0&rev=7

tpm2-pkcs11-1.9.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:35bf06c30cfa76fc0eba2c5f503cf7dd0d34a66afb2d292fee896b90362f633b
-size 1396590

tpm2-pkcs11-1.9.0.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEW0grjj4Z2nyXjh0BbeLpB44fUMEFAmPZLrwACgkQbeLpB44f
-UMG/fxAAq6LcxojU451o7FavO481TX3zq3qyYTmEkrTtRO2rnbKEyOcDP75FOYG7
-8gFFEZYNgucFU9qW9vzqe7d4whokijozNVcUy7+Wz/qr2e2DTEom8jC/1FIrBwQT
-Ahn6w+vCjYm8ZBcBO5w97U8ZDOB7FOovFRZBMaDuyWeEVsVxN3xWupAmth4B6L2h
-W8CmuQZTDAX2SmbbjnmBSCDkW8/hyuSIcHzsTRUxeRsVe2WVoGKUkl39zDHOJsOi
-Fo/uEkZiwVGFQtNo7LxCXooXZfcpfKDK2AL9fto03Rl4DTB7CW5xqEK3ybECa89i
-8sed2wMQLMibwzbln2GGfOu/Lr6We3nd98FEitKKXeSuMraDp5m0r+JMLvx43d9J
-vGHVLJoEQ3JabUUctxOi5R2ZYYEalBRzuBwpDt1qWhGqwt0VAOKVrW3NMs3vJci5
-bFG2sVxiekTK26S2ozsr0Pivl6mAlZRDGVAoff1iiLWJAr10hmGV7etSsARR87Ag
-lSnGBCqwk1d9RzI1VigXIbR0ZdHotry2B4CjIQDm4y71JLJopc4hpjD5tDFz5PZ6
-bLCV4jVrBq5kjgABMcIY/MmMPQ+2oE2x2Manqbj2T18mHQYj7rKhJ94ZRlJxILE4
-C29jS025HtEsYc+FVO2qfCok5p0p6v4n1aBrkzr4S6/RGUwy19s=
-=9JcL
------END PGP SIGNATURE-----

tpm2-pkcs11-1.9.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ce24aa5ec2471545576e892b6f64fd873a424371bbf9be4ca3a0e689ea11c9b7
+size 1412372

tpm2-pkcs11-1.9.1.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABMIAB0WIQTZGoLbMQ6OB1GcKYqYd8JqPNNkCQUCZvIOdwAKCRCYd8JqPNNk
+CbEAAP0bYjn9tqF7VtnaqWC8uFcc1wlslvuX7kUb64+s3NW/ngD/Z6L89UC05nXd
+Rm4RQ52b1Z3+RaN3Dfryecm1d4ijrm4=
+=xmEs
+-----END PGP SIGNATURE-----

tpm2-pkcs11.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Thu Dec 12 12:37:19 UTC 2024 - Lucas Mulling <lucas.mulling@suse.com>
+
+- Enable unit testing
+
+-------------------------------------------------------------------
+Wed Dec 11 16:38:18 UTC 2024 - Lucas Mulling <lucas.mulling@suse.com>
+
+- Update to 1.9.1
+  + Fixed
+    * configure:
+      Change mistaken += to =.
+      use user supplied --prefix even when p11kit is detected.
+    * Remove warning about unable to find FAPI when it's is not-compiled in and not chosen as the beckend.
+    * Fix memory leaks in tpm_create_transient_primary_from_template.
+    * Fix NULL pointer dereference in db.c on uses of CKA_ALLOWED_MECHANISMS.
+    * Fix offset miscalculation in FAPI backend that was corrupting data.
+    * Support CKM_ECDH1_DERIVE via C_DeriveKey.
+    * Fix usages of tpm2-ptool for its wrapped tpm2_ptool in tests.
+    * Fix failing db upgrades on double conversion to int.
+    * Fix db lock file due to missing parenthesis and order of operations.
+    * documentation:
+      Fix use of objects where tokens was meant.
+  + Changed
+    * --enable-fapi to --with-fapi. Note this is not a major version bump as its internal to builders only. However --enable-fapi left in place for backwards compat.
+  + Add maintainer public key:
+    tpm2-pkcs11.keyring
+
 -------------------------------------------------------------------
 Thu May 18 15:29:46 UTC 2023 - Alberto Planas Dominguez <aplanas@suse.com>
 

tpm2-pkcs11.keyring

@@ -51,3 +51,18 @@ YE7FfCwLBbLTYMeetHo8jGBRonTEOKMtPlp/fCMOp9w7CgMDuvfEwuTsA1ux4uAb
 tZZIbipcKcZmsU7Su4+oeyh61giG++M5rL2D
 =NFsd
 -----END PGP PUBLIC KEY BLOCK-----
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=4SNI
+-----END PGP PUBLIC KEY BLOCK-----

tpm2-pkcs11.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package tpm2-pkcs11
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %define so_ver  0
 %define pythons python3
 Name:           tpm2-pkcs11
-Version:        1.9.0
+Version:        1.9.1
 Release:        0
 Summary:        A PKCS#11 interface for TPM2 hardware
 License:        BSD-2-Clause
@@ -50,6 +50,9 @@ BuildRequires:  pkgconfig(tss2-mu)
 BuildRequires:  pkgconfig(tss2-rc)
 BuildRequires:  pkgconfig(tss2-tctildr)
 BuildRequires:  pkgconfig(yaml-0.1)
+# Required for testing
+BuildRequires:  pkgconfig(cmocka)
+BuildRequires:  dbus-1-daemon
 # Merge both subpackages
 Provides:       libtpm2_pkcs11-0 = %{version}
 Obsoletes:      libtpm2_pkcs11-0 < %{version}
@@ -69,7 +72,7 @@ Cryptographic Token Interface (Cryptoki) C API atop of TPM2 devices.
 
 %build
 autoreconf -fiv
-%configure --disable-static
+%configure --disable-static --enable-unit
 %make_build
 cd tools
 %python_build
@@ -82,6 +85,9 @@ cd tools
 %python_install
 %fdupes %{buildroot}
 
+%check
+%make_build check
+
 %post -p /sbin/ldconfig
 %postun -p /sbin/ldconfig