Accepting request 631989 from security

OBS-URL: https://build.opensuse.org/request/show/631989
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/yubico-piv-tool?expand=0&rev=10

yubico-piv-tool-1.5.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c18375179ba25bf9d61365b3903f033f112897bbd54ca63c62fa153f2d05aaab
-size 573453

yubico-piv-tool-1.6.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:91c3f575b59e52fa90e50342e5accbe7f71e9196cbe2ad6b9f5fef1e0a6baf83
+size 582734

yubico-piv-tool.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Tue Aug 28 09:37:34 UTC 2018 - kbabioch@suse.com
+
+- Version 1.6.1 (released 2018-08-17)
+  - Compilation warning fixes for OpenSSL 1.1 builds
+  - Fix length when encoding exactly 0xff bytes
+  - Check length of objects correctly before storing in buffer
+  - Check length of certificate correctly when storing
+- Version 1.6.0 (released 2018-08-08)
+  - Security release to mitigate YSA-2018-03 (YSA-2018-03, CVE-2018-14779,
+    CVE-2018-14780, bsc#1104809, bsc#1104811)
+  - Allow building against LibreSSL
+  - Bugfixes in OpenSSL 1.1 code
+  - Fix compilation warnings
+  - Fix ykcs11 key generation to work with OpenSSL 1.1
+  - Ykcs11 compatibility fixes
+- Make use of %license macro instead of %doc for COPYING
+- Applied spec-cleaner
+
 -------------------------------------------------------------------
 Thu Nov 30 15:14:13 UTC 2017 - t.gruner@katodev.de
 

yubico-piv-tool.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package yubico-piv-tool
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,23 +18,22 @@
 
 %define soname  1
 Name:           yubico-piv-tool
-Version:        1.5.0
+Version:        1.6.1
 Release:        0
 Summary:        Yubico YubiKey NEO CCID Manager
 License:        BSD-2-Clause
 Group:          Productivity/Networking/Security
-Url:            https://developers.yubico.com/
+URL:            https://developers.yubico.com/
 Source0:        https://developers.yubico.com/yubico-piv-tool/Releases/%{name}-%{version}.tar.gz
 Source1:        https://developers.yubico.com/yubico-piv-tool/Releases/%{name}-%{version}.tar.gz.sig
 BuildRequires:  check-devel
 BuildRequires:  libtool
 BuildRequires:  pcsc-lite-devel
-BuildRequires:  pkg-config
+BuildRequires:  pkgconfig
 BuildRequires:  valgrind
 BuildRequires:  pkgconfig(openssl)
 Requires:       libykcs11-%{soname} = %{version}
 Requires:       libykpiv%{soname} = %{version}
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
 This is a command line tool to interact with the PIV applet on a YubiKey NEO.
@@ -87,38 +86,31 @@ make install DESTDIR=%{buildroot} INSTALL="install -p"
 find %{buildroot} -type f -name "*.la" -delete -print
 
 %post -n libykpiv%{soname} -p /sbin/ldconfig
-
 %postun -n libykpiv%{soname} -p /sbin/ldconfig
-
 %post -n libykcs11-%{soname} -p /sbin/ldconfig
-
 %postun -n libykcs11-%{soname} -p /sbin/ldconfig
 
 %files
-%defattr(-,root,root)
-%doc COPYING NEWS ChangeLog README
+%license COPYING
+%doc NEWS ChangeLog README
 %{_bindir}/%{name}
 %{_mandir}/man1/*
 
 %files -n libykpiv%{soname}
-%defattr(-,root,root)
 %{_libdir}/libykpiv.so.%{soname}
-%{_libdir}/libykpiv.so.%{soname}.4.0
+%{_libdir}/libykpiv.so.%{soname}.4.3
 
 %files -n libykcs11-%{soname}
-%defattr(-,root,root)
 %{_libdir}/libykcs11.so.%{soname}
-%{_libdir}/libykcs11.so.%{soname}.4.0
+%{_libdir}/libykcs11.so.%{soname}.4.3
 
 %files -n libykpiv-devel
-%defattr(-,root,root)
 %dir %{_includedir}/ykpiv/
 %{_includedir}/ykpiv/*
 %{_libdir}/libykpiv.so
 %{_libdir}/pkgconfig/ykpiv.pc
 
 %files -n libykcs11-devel
-%defattr(-,root,root)
 %{_libdir}/libykcs11.so
 %{_libdir}/pkgconfig/ykcs11.pc