From 7b7db64f0af6762d489f3237fb4217672553cb6afacbed665d932e15f5328557 Mon Sep 17 00:00:00 2001
From: Karol Babioch <karol@babioch.de>
Date: Mon, 3 Jun 2019 08:34:04 +0000
Subject: [PATCH] Accepting request 707077 from home:kbabioch:branches:security

- Version 1.7.0 (released 2019-04-03)
  * Add ykpiv_get_serial() to API.
  * Add version and serial to status output.
  * FASC-N fixes for CHUID.
  * ykcs11: Fix ECDSA signatures.
  * Make selfsigned X.509 extensions have correct extensions to match openssl.
  * Security fixes.
  * Documentation fixes.
  * Try to clear memory that might contain secrets.

OBS-URL: https://build.opensuse.org/request/show/707077
OBS-URL: https://build.opensuse.org/package/show/security/yubico-piv-tool?expand=0&rev=28
---
 yubico-piv-tool-1.6.2.tar.gz     |   3 ---
 yubico-piv-tool-1.6.2.tar.gz.sig | Bin 310 -> 0 bytes
 yubico-piv-tool-1.7.0.tar.gz     |   3 +++
 yubico-piv-tool-1.7.0.tar.gz.sig | Bin 0 -> 310 bytes
 yubico-piv-tool.changes          |  13 +++++++++++++
 yubico-piv-tool.spec             |   8 ++++----
 6 files changed, 20 insertions(+), 7 deletions(-)
 delete mode 100644 yubico-piv-tool-1.6.2.tar.gz
 delete mode 100644 yubico-piv-tool-1.6.2.tar.gz.sig
 create mode 100644 yubico-piv-tool-1.7.0.tar.gz
 create mode 100644 yubico-piv-tool-1.7.0.tar.gz.sig

diff --git a/yubico-piv-tool-1.6.2.tar.gz b/yubico-piv-tool-1.6.2.tar.gz
deleted file mode 100644
index cb01076..0000000
--- a/yubico-piv-tool-1.6.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ea61bcd5c75471ed21903967d0121fb090aa4d325ec279a24633e3235fdf231b
-size 584063
diff --git a/yubico-piv-tool-1.6.2.tar.gz.sig b/yubico-piv-tool-1.6.2.tar.gz.sig
deleted file mode 100644
index 5e3e4a9d1de5172d5c9aa86b63692cc58ea71f45200dce379d0bcc97dd7ba246..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 310
zcmV-60m=S}0W$;u0SEvc79j)*I|5?7p>R_N)&B;(pbylt7K{o70$ZD8R{#nL5WJud
z)Up<g3f}h!0Fy)l6~t+UVg#+<-Bo4|N~X6eyf7fgFbG4_k%72~s@)-L<)R@EY`t)C
zB8q;9dVDTyd+vUQC)%egJM%{KaiFn-9CT4)l|$)IKWUi4a$M@#3O=MJ)VZ;t;*f2(
z8(=(%726wEFC9zGM`%GvCE33V;L)Svc~<z0fy<)D?Xh?+hPK{|h-<~xjcA;4M8VxZ
zBXudpdMeP##FhbEj$mqZ*^@Vj<%25$f@$|>0)=SEM}hwGRs&Jgz!7>)s|`W(E2w!~
zd---JGO{pl%M~NWSVgmcGrh{k`S<UupEf4}NIu~oB5^%P_?Li1;X%|Yj{nRm2TkL-
IOb?v+eq^1F7XSbN

diff --git a/yubico-piv-tool-1.7.0.tar.gz b/yubico-piv-tool-1.7.0.tar.gz
new file mode 100644
index 0000000..9535879
--- /dev/null
+++ b/yubico-piv-tool-1.7.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b428527e4031453a637128077983e782e9fea25df98e95e0fc27819b2e82fd7f
+size 588206
diff --git a/yubico-piv-tool-1.7.0.tar.gz.sig b/yubico-piv-tool-1.7.0.tar.gz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..dba80a987c8b037f9045fadff9c9e65e8cb560a7d134674e8dddecbc41eb5ae7
GIT binary patch
literal 310
zcmV-60m=S}0W$;u0SEvc79j)*I|5?7p>R_N)&B;(pbylt7K{o70$ikKq5ujB5WJud
z)Up<g3RnvV{S^llo<YrXyap6Nz>7HR3N29phWBPnkhl9Rn~Qryx*#tO_a(v`>oQih
z8xOjMOPg(qbu||8V;NhtV;gjjb)^`nmfjNf(@*@RuFnYzWw7!V4UGW*waAoqYZh1_
z$BSM@X<<vSH+q?sKRArbzWnc32ztm4mYUh%g>ELNaS8#n=jyy6uSb3>y{rN@BN3ss
zi^ZW`&%!oD`0SE9*CanC4mjJY)Bx;Pk_=Y{T;{A#Kw6llsM2SW0K+}L6F+8<*s>e0
z%CODByQS8ZG&7=VhSn+95A|)bv0SSr;*d9}Tr~r}KCmNtd+FGo4U{{iu6m;t<TEH`
I*=)(em`MkU>i_@%

literal 0
HcmV?d00001

diff --git a/yubico-piv-tool.changes b/yubico-piv-tool.changes
index 34f84bb..df243db 100644
--- a/yubico-piv-tool.changes
+++ b/yubico-piv-tool.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Mon Jun  3 08:22:20 UTC 2019 - Karol Babioch <kbabioch@suse.de>
+
+- Version 1.7.0 (released 2019-04-03)
+  * Add ykpiv_get_serial() to API.
+  * Add version and serial to status output.
+  * FASC-N fixes for CHUID.
+  * ykcs11: Fix ECDSA signatures.
+  * Make selfsigned X.509 extensions have correct extensions to match openssl.
+  * Security fixes.
+  * Documentation fixes.
+  * Try to clear memory that might contain secrets.
+
 -------------------------------------------------------------------
 Fri Sep 28 09:10:38 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/yubico-piv-tool.spec b/yubico-piv-tool.spec
index 395c584..d274101 100644
--- a/yubico-piv-tool.spec
+++ b/yubico-piv-tool.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package yubico-piv-tool
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define sover  1
 Name:           yubico-piv-tool
-Version:        1.6.2
+Version:        1.7.0
 Release:        0
 Summary:        Yubico YubiKey NEO CCID Manager
 License:        BSD-2-Clause
@@ -98,11 +98,11 @@ find %{buildroot} -type f -name "*.la" -delete -print
 
 %files -n libykpiv%{sover}
 %{_libdir}/libykpiv.so.%{sover}
-%{_libdir}/libykpiv.so.%{sover}.4.4
+%{_libdir}/libykpiv.so.%{sover}.5.0
 
 %files -n libykcs11-%{sover}
 %{_libdir}/libykcs11.so.%{sover}
-%{_libdir}/libykcs11.so.%{sover}.4.4
+%{_libdir}/libykcs11.so.%{sover}.5.0
 
 %files -n libykpiv-devel
 %dir %{_includedir}/ykpiv/