From 91c7de02690f20cf43c8421e512c6e40e4ff4f076bb3d159d08112d7982d21fc Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Fri, 18 Dec 2020 09:57:31 +0000 Subject: [PATCH] Accepting request 856830 from home:dimstar:Factory - Update to version 1.2.31: + Unload error strings in OpenSSL shutdown. + Make userData available when executing preExecCallback function. + Add an option to use secure memset. - Pass --disable-md5 to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1] https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1 also, nss 3.59 seems to disable md5 finally OBS-URL: https://build.opensuse.org/request/show/856830 OBS-URL: https://build.opensuse.org/package/show/LibreOffice:Factory/xmlsec1?expand=0&rev=30 --- xmlsec1-1.2.30.tar.gz | 3 --- xmlsec1-1.2.31.tar.gz | 3 +++ xmlsec1.changes | 14 ++++++++++++++ xmlsec1.spec | 7 ++++--- 4 files changed, 21 insertions(+), 6 deletions(-) delete mode 100644 xmlsec1-1.2.30.tar.gz create mode 100644 xmlsec1-1.2.31.tar.gz diff --git a/xmlsec1-1.2.30.tar.gz b/xmlsec1-1.2.30.tar.gz deleted file mode 100644 index 5e23b7b..0000000 --- a/xmlsec1-1.2.30.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2d84360b03042178def1d9ff538acacaed2b3a27411db7b2874f1612ed71abc8 -size 1989670 diff --git a/xmlsec1-1.2.31.tar.gz b/xmlsec1-1.2.31.tar.gz new file mode 100644 index 0000000..9f75bfc --- /dev/null +++ b/xmlsec1-1.2.31.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9b10bc52cc31e4f76162e3975e50db26b71ab49c571d810b311ca626be5a0b26 +size 1989144 diff --git a/xmlsec1.changes b/xmlsec1.changes index 88a98f3..883e7e2 100644 --- a/xmlsec1.changes +++ b/xmlsec1.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Thu Dec 17 09:16:49 UTC 2020 - Dominique Leuenberger + +- Update to version 1.2.31: + + Unload error strings in OpenSSL shutdown. + + Make userData available when executing preExecCallback + function. + + Add an option to use secure memset. +- Pass --disable-md5 to configure: The cryptographic strength of + the MD5 algorithm is sufficiently doubtful that its use is + discouraged at this time. It is not listed as an algorithm in + [XMLDSIG-CORE1] + https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1 + ------------------------------------------------------------------- Thu Jun 18 12:10:34 UTC 2020 - Tomáš Chvátal diff --git a/xmlsec1.spec b/xmlsec1.spec index b8688fb..1fbe171 100644 --- a/xmlsec1.spec +++ b/xmlsec1.spec @@ -22,7 +22,7 @@ %global libgnutls libxmlsec1-gnutls1 %global libnss libxmlsec1-nss1 Name: xmlsec1 -Version: 1.2.30 +Version: 1.2.31 Release: 0 Summary: Library providing support for "XML Signature" and "XML Encryption" standards License: MIT @@ -137,12 +137,13 @@ Requires: mozilla-nss-devel >= 3.2 Libraries, includes, etc. for developing XML Security applications with NSS. %prep -%setup -q +%autosetup -p1 %build %configure \ --disable-static \ - --disable-silent-rules + --disable-silent-rules \ + --disable-md5 %make_build %install