rpm/parsec
SHA256
1
0
Fork 0
forked from pool/parsec
Code Pull Requests Activity
07287f5d63
parsec/parsec.changes

186 lines
7.2 KiB
Plaintext
Raw Normal View History

Accepting request 1080909 from home:Guillaume_G:branches:security - Update to 1.2.0: * Closed issue since 1.2.0-rc1: - Parsec 1.1 fails to build with meta-security master branch OBS-URL: https://build.opensuse.org/request/show/1080909 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=44
2023-04-20 17:10:55 +02:00
-------------------------------------------------------------------
Thu Apr 20 15:01:10 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.2.0:
* Closed issue since 1.2.0-rc1:
- Parsec 1.1 fails to build with meta-security master branch
Accepting request 1075017 from home:Guillaume_G:branches:security - Disable jwt-svid-authenticator (SPIFFE) until fixed upstream with gcc13 - https://github.com/parallaxsecond/parsec/issues/672 OBS-URL: https://build.opensuse.org/request/show/1075017 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=42
2023-03-28 15:00:46 +02:00
-------------------------------------------------------------------
Mon Mar 27 09:55:24 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Disable jwt-svid-authenticator (SPIFFE) until fixed upstream
with gcc13 - https://github.com/parallaxsecond/parsec/issues/672
Accepting request 1073923 from home:Guillaume_G:branches:security - Update to 1.2.0-rc1 - Drop upstream patch: * 664.patch OBS-URL: https://build.opensuse.org/request/show/1073923 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=41
2023-03-23 10:27:14 +01:00
-------------------------------------------------------------------
Thu Mar 23 09:01:01 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.2.0-rc1
- Drop upstream patch:
* 664.patch
Accepting request 1071968 from home:Guillaume_G:branches:security - Add patch to fix build on Tumbleweed (update tss-esapi to 7.2.0): * 664.patch - Add <param name="update">true</param> to _service to apply security updates - Use cargo-packaging for all flavors - Enable cargo_audit OBS-URL: https://build.opensuse.org/request/show/1071968 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=39
2023-03-15 09:18:22 +01:00
-------------------------------------------------------------------
Wed Mar 15 07:27:47 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add patch to fix build on Tumbleweed (update tss-esapi to 7.2.0):
* 664.patch
- Add <param name="update">true</param> to _service to apply
security updates
- Use cargo-packaging for all flavors
- Enable cargo_audit
Accepting request 1059543 from home:Guillaume_G:branches:security - Add libstdc++6-devel-gcc11 to fix build with GCC11 on Backports SLE15-SP4/5 OBS-URL: https://build.opensuse.org/request/show/1059543 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=37
2023-01-19 12:05:28 +01:00
-------------------------------------------------------------------
Thu Jan 19 11:03:49 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add libstdc++6-devel-gcc11 to fix build with GCC11 on
Backports SLE15-SP4/5
Accepting request 1007911 from home:Guillaume_G:branches:security - Update to 1.1.0: * Main updates: - Add generate random support into TPM and PKCS11 providers - Implement configurable exclusion of deprecated primitives - Allow binary PIN values for PKCS11 provider - Recognise a PKCS11 hardware token with its serial number instead of slot number * Full changelog: https://github.com/parallaxsecond/parsec/releases/tag/1.1.0 OBS-URL: https://build.opensuse.org/request/show/1007911 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=35
2022-10-04 15:45:36 +02:00
-------------------------------------------------------------------
Tue Oct 4 13:03:09 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.1.0:
* Main updates:
- Add generate random support into TPM and PKCS11 providers
- Implement configurable exclusion of deprecated primitives
- Allow binary PIN values for PKCS11 provider
- Recognise a PKCS11 hardware token with its serial number
instead of slot number
* Full changelog: https://github.com/parallaxsecond/parsec/releases/tag/1.1.0
-------------------------------------------------------------------
Mon Sep 26 07:41:22 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.1.0-rc2
Accepting request 966122 from home:Guillaume_G:branches:security - Update to 1.0.0: * Update changelog file only - Disable build on x86 since the build fails OBS-URL: https://build.opensuse.org/request/show/966122 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=27
2022-03-31 08:28:28 +02:00
-------------------------------------------------------------------
- rust-packaging -> cargo-packaging (bsc#1198131) OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=30
2022-04-06 09:01:20 +02:00
Wed Apr 6 07:00:43 UTC 2022 - Marcus Meissner <meissner@suse.com>
- rust-packaging -> cargo-packaging (bsc#1198131)
-------------------------------------------------------------------
Accepting request 966122 from home:Guillaume_G:branches:security - Update to 1.0.0: * Update changelog file only - Disable build on x86 since the build fails OBS-URL: https://build.opensuse.org/request/show/966122 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=27
2022-03-31 08:28:28 +02:00
Thu Mar 31 06:17:05 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.0.0:
* Update changelog file only
- Disable build on x86 since the build fails
Accepting request 963699 from home:Guillaume_G:branches:security - Update to 1.0.0-rc3: * Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc2...1.0.0-rc3 * Fixes CVE-2022-24713 - boo#1196972 OBS-URL: https://build.opensuse.org/request/show/963699 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=25
2022-03-21 14:31:26 +01:00
-------------------------------------------------------------------
Mon Mar 21 13:02:29 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.0.0-rc3:
* Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc2...1.0.0-rc3
* Fixes CVE-2022-24713 - boo#1196972
Accepting request 960364 from home:Guillaume_G:branches:security - Update to 1.0.0-rc2: * Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc1...1.0.0-rc2 - Remove CryptoAuthLib (CAL) provider as it is unmaintained. OBS-URL: https://build.opensuse.org/request/show/960364 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=23
2022-03-09 08:35:10 +01:00
-------------------------------------------------------------------
Tue Mar 8 17:29:56 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.0.0-rc2:
* Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc1...1.0.0-rc2
- Remove CryptoAuthLib (CAL) provider as it is unmaintained.
Accepting request 957245 from home:Guillaume_G:branches:security - Update to 1.0.0-rc1: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.1...1.0.0-rc1 - Drop upstream patch: * harden_parsec.service.patch OBS-URL: https://build.opensuse.org/request/show/957245 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=21
2022-02-24 10:42:19 +01:00
-------------------------------------------------------------------
Thu Feb 24 08:29:19 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 1.0.0-rc1:
* Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.1...1.0.0-rc1
- Drop upstream patch:
* harden_parsec.service.patch
Accepting request 946148 from home:Guillaume_G:branches:security - Update to 0.8.0: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.0...0.8.1 OBS-URL: https://build.opensuse.org/request/show/946148 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=19
2022-01-13 14:47:08 +01:00
-------------------------------------------------------------------
Thu Jan 13 13:25:14 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=20
2022-01-13 14:47:48 +01:00
- Update to 0.8.1:
Accepting request 946148 from home:Guillaume_G:branches:security - Update to 0.8.0: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.0...0.8.1 OBS-URL: https://build.opensuse.org/request/show/946148 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=19
2022-01-13 14:47:08 +01:00
* Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.0...0.8.1
Accepting request 921728 from home:Guillaume_G:branches:security - Allow access to /run/parsec to all users - Requires rust 1.53+ (now also available in 15.3/15-SP3 via Update) which allow to enable same features accross distros OBS-URL: https://build.opensuse.org/request/show/921728 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=13
2021-09-27 14:13:40 +02:00
-------------------------------------------------------------------
Accepting request 937755 from home:Guillaume_G:branches:security - Fix /run/parsec permission to 755. This is enough for all users to access the service - boo#1193484 OBS-URL: https://build.opensuse.org/request/show/937755 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=14
2021-12-09 12:06:53 +01:00
Thu Dec 9 11:05:48 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Fix /run/parsec permission to 755. This is enough for all
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=15
2021-12-09 14:58:41 +01:00
users to access the service - boo#1193484 - CVE-2021-36781
Accepting request 937755 from home:Guillaume_G:branches:security - Fix /run/parsec permission to 755. This is enough for all users to access the service - boo#1193484 OBS-URL: https://build.opensuse.org/request/show/937755 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=14
2021-12-09 12:06:53 +01:00
-------------------------------------------------------------------
Accepting request 925351 from home:jsegitz:branches:systemdhardening:security Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/925351 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=16
2021-12-21 16:09:55 +01:00
Fri Oct 15 07:01:37 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_parsec.service.patch
Modified:
* parsec.service
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=18
2021-12-21 16:16:33 +01:00
* Upstream submission: https://github.com/parallaxsecond/parsec/issues/569
Accepting request 925351 from home:jsegitz:branches:systemdhardening:security Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/925351 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=16
2021-12-21 16:09:55 +01:00
-------------------------------------------------------------------
Accepting request 921728 from home:Guillaume_G:branches:security - Allow access to /run/parsec to all users - Requires rust 1.53+ (now also available in 15.3/15-SP3 via Update) which allow to enable same features accross distros OBS-URL: https://build.opensuse.org/request/show/921728 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=13
2021-09-27 14:13:40 +02:00
Mon Sep 27 10:18:08 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Allow access to /run/parsec to all users
- Requires rust 1.53+ (now also available in 15.3/15-SP3 via Update)
which allow to enable same features accross distros
Accepting request 920614 from home:Guillaume_G:branches:security - Update to 0.8.0: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.7.2...0.8.0 - Drop upstream patch: * parsec-fix-old-rust.patch - Disable 'trusted-service-provider' as it currently fails to build - Disable 'jwt-svid-authenticator' (SPIFFE-based authenticator) on Leap, as it cannot be compiled with rust 1.43.1 OBS-URL: https://build.opensuse.org/request/show/920614 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=12
2021-09-21 11:16:10 +02:00
-------------------------------------------------------------------
Fri Aug 6 07:01:27 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 0.8.0:
* Changelog: https://github.com/parallaxsecond/parsec/compare/0.7.2...0.8.0
- Drop upstream patch:
* parsec-fix-old-rust.patch
- Disable 'trusted-service-provider' as it currently fails to build
- Disable 'jwt-svid-authenticator' (SPIFFE-based authenticator)
on Leap, as it cannot be compiled with rust 1.43.1
Accepting request 885427 from home:Guillaume_G:branches:security - Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm* owned by tss user - Requires 'libtss2-tcti-device0' as it is required to start parsec with TPM support - Enable all authenticators which adds 'direct-authenticator' - Add CryptoAuthLib template (disabled) in config.toml OBS-URL: https://build.opensuse.org/request/show/885427 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=8
2021-04-14 17:57:17 +02:00
-------------------------------------------------------------------
Accepting request 889537 from home:Guillaume_G:branches:security - Fix build with old rust used in Leap 15.3/SLE15-SP3. * parsec-fix-old-rust.patch OBS-URL: https://build.opensuse.org/request/show/889537 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=10
2021-04-30 13:37:33 +02:00
Fri Apr 30 11:36:56 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Fix build with old rust used in Leap 15.3/SLE15-SP3.
* parsec-fix-old-rust.patch
-------------------------------------------------------------------
Accepting request 885427 from home:Guillaume_G:branches:security - Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm* owned by tss user - Requires 'libtss2-tcti-device0' as it is required to start parsec with TPM support - Enable all authenticators which adds 'direct-authenticator' - Add CryptoAuthLib template (disabled) in config.toml OBS-URL: https://build.opensuse.org/request/show/885427 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=8
2021-04-14 17:57:17 +02:00
Wed Apr 14 14:54:32 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm*
owned by tss user
- Requires 'libtss2-tcti-device0' as it is required to start parsec
with TPM support
-------------------------------------------------------------------
Wed Apr 7 07:42:24 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Enable all authenticators which adds 'direct-authenticator'
- Add CryptoAuthLib template (disabled) in config.toml
Accepting request 882567 from home:Guillaume_G:branches:security - Make 'parsec' user part of 'tss' group to access /dev/tpm* devices - Update to 0.7.2: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2 - Recommends 'softhsm' as it is used by PKCS#11 backend - Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend) - Add PKCS#11 template (disabled) in config.toml - Disable Tpm backend by default in config.toml OBS-URL: https://build.opensuse.org/request/show/882567 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=5
2021-04-01 15:00:44 +02:00
-------------------------------------------------------------------
Thu Apr 1 10:19:21 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Make 'parsec' user part of 'tss' group to access /dev/tpm* devices
-------------------------------------------------------------------
Wed Mar 31 16:02:31 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 0.7.2:
* Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2
-------------------------------------------------------------------
Tue Mar 30 13:20:44 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend)
- Add PKCS#11 template (disabled) in config.toml
- Disable Tpm backend by default in config.toml
Accepting request 848361 from home:Guillaume_G:branches:security - Enable 'all-providers' which adds 'pkcs11-provider' compared to previous config - Drop unneeded patch: * pkcs11-libloading-issue.patch OBS-URL: https://build.opensuse.org/request/show/848361 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=3
2020-11-13 15:30:27 +01:00
-------------------------------------------------------------------
Fri Nov 13 14:19:05 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Enable 'all-providers' which adds 'pkcs11-provider' compared to
previous config
- Drop unneeded patch:
* pkcs11-libloading-issue.patch
Accepting request 844364 from home:Guillaume_G parsec service OBS-URL: https://build.opensuse.org/request/show/844364 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=1
2020-11-03 09:16:41 +01:00
-------------------------------------------------------------------
Fri Oct 23 15:10:32 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update to 0.6.0
- Update config.toml
- Add patch:
* pkcs11-libloading-issue.patch
-------------------------------------------------------------------
Fri Oct 16 16:07:51 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Initiale version 0.5.0
Copy Permalink