------------------------------------------------------------------- Fri Jul 29 08:49:15 UTC 2022 - pgajdos@suse.com - use pam rpm macros [bsc#1190957] ------------------------------------------------------------------- Sat Jan 15 10:26:28 UTC 2022 - Andreas Stieger - update to 0.6.12: * Limit signature length to 65536 bytes * A number of bug fixes and OpenSSL compatibility updates * console output color updates * Add support of ECDSA signature in addition to RSA ------------------------------------------------------------------- Thu Oct 14 10:34:54 UTC 2021 - Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified: * pkcs11_eventmgr.service ------------------------------------------------------------------- Tue Jan 29 22:45:28 CET 2019 - sbrabec@suse.com - Update to version 0.6.10: * Fix some security issues (thx @frankmorgner): https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/ (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch, 0002-fixed-buffer-overflow-with-long-home-directory.patch, 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch). * Fix buffer overflow with long home directory. * Fix wiping secrets (now using OpenSSL_cleanse()). * Verify using a nonce from the system, not the card. * Fix segfalt when checking CRLs (drop pam_pkcs11-crl-check.patch). - Add rcpkcs11_eventmgr service symlink. ------------------------------------------------------------------- Fri Aug 17 10:12:31 UTC 2018 - vcizek@suse.com - Address security issues found by X41 D-Sec audit (bsc#1105012) * Authentication Replay * Buffer Overflow * Memory not cleaned properly before free() - add patches: * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch * 0002-fixed-buffer-overflow-with-long-home-directory.patch * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch ------------------------------------------------------------------- Mon Jul 23 17:36:18 CEST 2018 - sbrabec@suse.com - Fix segfault and fetch problems when checking CRLs (pam_pkcs11-crl-check.patch). ------------------------------------------------------------------- Sun Sep 10 00:08:17 UTC 2017 - jengelh@inai.de - Repair bulletpoint that skidded in description. Trim description of %name-devel-doc, it does not cotain the programs. ------------------------------------------------------------------- Wed Aug 9 15:08:07 UTC 2017 - astieger@suse.com - add service file bsc#1049219 ------------------------------------------------------------------- Thu Jul 20 18:02:57 CEST 2017 - sbrabec@suse.com - Updated to version 0.6.9: * Upstream web moved. * pkcs11_listcerts: Do not fail on certificate error. * Do not fail if card was already unlocked. * Other bug fixes. * Translation updates. - Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch. - Work around incorrect upstream release process not calling "make dist". - Split API documentation into a separate package pam_pkcs11-devel-doc. - Add pam_pkcs11-fsf-address.patch. ------------------------------------------------------------------- Tue Feb 9 19:02:43 UTC 2016 - antoine.belvire@laposte.net - Fix build for Tumbleweed: * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch * Rebuild configure with the bootstrap script (add libtool as build dependency) ------------------------------------------------------------------- Tue Jul 10 17:24:56 CEST 2012 - sbrabec@suse.cz - Updated to version 0.6.8: * Code cleanup. * Bug fixes. * Translation updates. ------------------------------------------------------------------- Tue Feb 28 19:54:16 CET 2012 - sbrabec@suse.cz - Change nssdb path to /etc/pki/nssdb (bnc#463469). - Make libdir paths in pam_pkcs11.conf biarch-wise. ------------------------------------------------------------------- Wed Jan 5 18:40:44 CET 2011 - sbrabec@suse.cz - Updated to version 0.6.6: * Compatible with pcsc-lite-1.6. * New mapper API. * Minor fixes. * Translaton updates. ------------------------------------------------------------------- Mon Feb 1 12:20:03 UTC 2010 - jengelh@medozas.de - package baselibs.conf ------------------------------------------------------------------- Wed Aug 5 15:55:31 CEST 2009 - sbrabec@suse.cz - Updated to version 0.6.1: * Added functions to API. * Fixes from openSUSE packages upstreamed. * Minor fixes. * Translaton updates. ------------------------------------------------------------------- Thu Jun 25 12:41:19 CEST 2009 - sbrabec@suse.cz - Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). ------------------------------------------------------------------- Wed Oct 15 18:30:29 CEST 2008 - sbrabec@suse.cz - Fixed all implicit declarations. ------------------------------------------------------------------- Tue Sep 23 17:49:42 CEST 2008 - sbrabec@suse.cz - Fixed uninitialized variable (bnc#351207). ------------------------------------------------------------------- Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de - added baselibs.conf file to build xxbit packages for multilib support ------------------------------------------------------------------- Thu Sep 6 21:08:43 CEST 2007 - jberkman@novell.com - use the same directory for nssdb as the kerberos pkinit plugin ------------------------------------------------------------------- Tue Jul 31 17:34:21 CEST 2007 - sbrabec@suse.cz - Build with NSS instead of openssl. - Applied patches from Jacob Berkman: MS UPN OID and NSS configuration. - Fixed implicit declaration. ------------------------------------------------------------------- Thu Jul 26 14:32:24 CEST 2007 - sbrabec@suse.cz - Updated to version 0.6.0: * compiler warning fixes * I18N support * new configuration options * support for new environment variables * new tool pkcs11_setup * support for the NSS crypto libraries (off by default) * for more changes see ChangeLog.svn ------------------------------------------------------------------- Fri May 12 16:18:38 CEST 2006 - sbrabec@suse.cz - New SuSE package, version 0.5.3.