Changelog for libksba8-1.6.3-2.2.x86_64.rpm :

* Fri Dec 23 2022 Dirk Müller - update to 1.6.3 (bsc#1206579, CVE-2022-47629):
* Fix another integer overflow in the CRL parser. Release-info: https://dev.gnupg.org/T6304
* Mon Oct 17 2022 Pedro Monreal - libksba 1.6.2: [bsc#1204357, CVE-2022-3515]
* Fix integer overflow in the CRL parser.
* Sun Sep 18 2022 Andreas Stieger - libksba 1.6.1:
* Allow an OCSP server not to return the sent nonce- fix rpmlint warnings
* Fri Jun 11 2021 Pedro Monreal - libksba 1.6.0:
* Limited support for the Authenticated-Enveloped-Data content type.
* Support password based decryption.
* Silence warnings from static analyzers.
* Interface changes relative to the 1.5.0 release: - KSBA_CT_AUTHENVELOPED_DATA NEW.
* Wed Apr 07 2021 Andreas Stieger - libksba 1.5.1:
* Support Brainpool curves specified by ECDomainParameters
* Fri Nov 20 2020 Andreas Stieger - libksba 1.5.0:
* ksba_cms_identify now identifies OpenPGP keyblock content
* Supports TR-03111 plain format ECDSA signature verification
* Fixes a CMS signed data parser bug exhibited by a somewhat strange CMS message- remove deprecated texinfo macros and update signing keyring
* Wed May 20 2020 Pedro Monreal Gonzalez - libksba 1.4.0:
* Supports ECDSA and EdDSA certificate creation and parsing.
* Supports ECDH enveloped data.
* Supports ECDSA and EdDSA signed data.
* Supports rsaPSS signature verification.
* Supports standard file descriptors in ksba_reader_read.
* Allows for optional elements in keyinfo objects.
* Fixes error detection in the CMS parser.
* Fixes memory leak in ksba_cms_identify.
* New constants KSBA_VERSION and KSBA_VERSION_NUMBER.
* New API to make creation of DER objects easy.
* Interface changes relative to the 1.3.5 release: KSBA_VERSION NEW. KSBA_VERSION_NUMBER NEW. KSBA_CT_SPC_IND_DATA_CTX NEW. KSBA_CLASS_
* NEW. KSBA_TYPE_
* NEW. ksba_der_t NEW. ksba_der_release NEW. ksba_der_builder_new NEW. ksba_der_builder_reset NEW. ksba_der_add_ptr NEW. ksba_der_add_val NEW. ksba_der_add_int NEW. ksba_der_add_oid NEW. ksba_der_add_bts NEW. ksba_der_add_der NEW. ksba_der_add_tag NEW. ksba_der_add_end NEW. ksba_der_builder_get NEW.
* Thu Feb 22 2018 fvogtAATTsuse.com- Use %license (boo#1082318)
* Mon Aug 22 2016 astiegerAATTsuse.com- libksba 1.3.5:
* Limit the allowed size of complex ASN.1 objects (e.g. certificates) to 16MiB.
* Avoid read access to unitialized memory.
* Improve detection of invalid RDNs.
* Encode the OCSP nonce value as an octet string as described by RFC-6960.
* Tue May 10 2016 astiegerAATTsuse.com- libksba 1.3.4:
* Fixed two OOB read access bugs which could be used to force a DoS. boo#979261 CVE-2016-4574, CVE-2016-4579
* Fixed a crash due to faulty curve OID lookup code.
* Synced the list of supported curves with those of Libgcrypt.
* New configure option --enable-build-timestamp; a build timestamp is not anymore used by default.