Changelog for libxmlsec1-devel-1.2.27-6.120.x86_64.rpm :

* Wed Apr 10 2019 John Vandenberg - Set URL to new repository https://github.com/lsh123/xmlsec- Update to 1.2.27
* fix coverity errors
* fix gost 2012 (issue #212)
* support truncated zeros in ECDSA signatures (e.g. from Java) issue #228 (#229)
* nss: improve assert in xmlSecNssASN1IntegerWrite() (#222)
* nss: fix undefined behavior due to too large shift (#221)
* nss: fix memory leak in GetCertName() (#220)
* mscng: implement rsa oaep decrypt/encrypt (#219)
* fix RSA OAEP params in openssl (#215)
* mscrypto: fix the last cl.exe warning (#214)
* mscng: add ECDSA-SHA384 support (#210)
* NSS: add ECDSA-SHA384 support (#208)
* oss-fuzz: Added one test harness and fuzzer config (#204)
* support signatures w/o SignatureMethod (#206)
* support multiple keynames (issue #200) (#203)
* fix xmlSecParseMemory() memory leak (issue #199) (#202)
* nss: add dsa sha256 support (#201)
* Fix xmlSecKeyUsage values comments that describe their purpose. (#198)
* mscng: fix use-after-free, implement adoption of private key as part of key extraction (#192)
* First-pass at aes-gcm support for mscng and openssl backends (#183)- Changes for 1.2.26
* upgrade gtkdoc to latest version (remove templates); add xmlsec-mscng (#179)
* MSCNG: allow adding a HCERTSTORE to the list of certs stores (#178)
* reorder IO callbacks lookup (#175)
* MSCNG: add keys store support (#173)
* NSS: ECDSA updates (#172)
* MSCNG: add key wrappers encryption support (#171)
* mscrypto: fix selection CryptoPro CSP provider for GOST R 34.10-2001 signature (#170)
* mscrypto: add support for GOST 2012 (#169)
* MSCNG: initial encrypt support (#168)
* MSCNG: add initial decrypt support (#166)
* MSCNG: add raw RSA support (#163)
* Add missing return(-1). (#165)
* MSCNG: adopt untrusted cert (#161)
* MSCNG: add HMAC support (#160)
* MSCNG: raw DSA support (#158)
* MSCNG: handle --verification-time (#155)
* MSCNG: add DSA support (#154)
* MSCNG: add RSA support (#151)
* MSCNG: add SHA1 and SHA256 support for ECDSA (#149)
* mscng: signature creation (#148)
* mscrypto: fix regression in xmlSecMSCryptoAppPkcs12LoadMemory() (#147)
* MSCNG: adopt key certificate (#146)
* MSCNG: verify certificate (#144)
* MSCNG: verify signature (#143)
* MSCNG: implement public key extraction from certificate (#142)
* MSCNG: adopt trusted certificate (#141)
* Initial MS CNG work (#140)
* mscrypto: fix typo in xmlSecMSCryptoAppPkcs12LoadMemory() (#137)
* rollback the RSA private key detection change from PR #59
* add GA- Changes for 1.2.25
* Fix licensing info (#127) (#128)
* nss: add SHA224 support (#123)
* fix error reporting (roumen)
* style.css management (roumen)
* fix gcrypt memory leak #113
* fix regression (#112)
* added a comment about lifetime of the parameter requirements
* Add Default linefeed for xmltree module (#110)
* removing openssl 098 (#106)
* Remove deprecated (#105)
* bump min libxml2 version for xmlParserCtxt::input_id- Changes for 1.2.24
* fix coverity error (#102)
* remaining errors and compile warning fixes (#101)
* Cleanup remaining errors; restore distclean (and disable dynamic loading for mingw) (#99)
* Cleanup compile warnings and OpenSSL version/features detection
* Eliminate unnecessary else branches after return statements (#96)
* attempt XXE prevention using custom external entity loader (#93)
* Remove never read variable assignments (#95)
* gnutls: fix XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS handling (#94)
* openssl: fix XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS handling (#92)
* nss: add ECDSA-SHA512 supports (#89)
* nss: add ECDSA-SHA1 support (#88)
* nss: add ECDSA-SHA256 support (#83)
* issue #84
* Change ECDSA tests to use the secp256r1 parameter (#81)
* mscrypto: fix XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS handling (#79)
* nss: fix XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS handling (#78)
* Mscrypto errors (#76)
* More errors handling
* remove callbacks (#74)
* nss adopt cert type (#73)
* convert other errors (#71)
* cleanup Nss errors handling (#70)
* fix openssl errors
* gnupg errors (#66)
* better support for openssl 098
* fix openssl 098 support and rename wrapper file (#68)
* Gcrypt errors (#65)
* xml parser errors (#64)
* Libxslt errors (#63)
* Libxml errors (#62)
* better malloc/strdup error handling
* Openssl swap params order (#60)
* Internal errors handling (#58)
* use RSA_FLAG_CACHE_PRIVATE flag too (#59)
* centralize openssl error reporting (#57)
* fix compatibility defines- Changes for 1.2.23
* Fixed gcrypto RSA/DSA keys params ordering
* Better X509Data templates
* Fixed memory leak caused by xmlGetProp
* Fixed KW transforms (overlapping buffer error) for OpenSSL 1.1.0
* Fixed pkg-config detection
* Added initial support OpenSSL 1.1.0
* Fixed signing with RSA SHA2 via mscrypto
* Fixed mscrypto undeclared XMLSEC_DEFAULT_CRYPTO
* Fixed mismatched conditional for XMLSEC_NO_ECDSA
* Fixed openssl cert depth verification param usage
* Fixed stdin/stdout in xmlsec1 app- Changes for 1.2.22
* Restored SOAP support for Lasso- Changes for 1.2.21
* Added OOXML Relationships Transform Algorithm
* Deprecated XMLSEC_CRYPTO define in favor of xmlSecGetDefaultCrypto()
* Revamped manpages/documentation build to completely pass \'make distcheck\' tests
* Added OpenSSL 1.1.0 API support (major refactoring for block ciphers and DSA/ECDSA signatures)
* Migrated to GitHub (https://github.com/lsh123/xmlsec)
* Removed support for legacy OpenSSL 0.9.6 (last release: March, 2004) and 0.9.7 (last release: February, 2007)
* Added experimental GOST2012 support
* Fixed several compaints from Clang and Coverity
* Removed XKMS support -- it was never completed and not worth keeping
* Wed Mar 04 2015 mpluskalAATTsuse.com- Cleanup spec file with spec-cleaner- Update to 1.2.20
* fix build on MacOSX (bug #680307)
* update certs for examples (bug #674572)
* update test certs to be valid till 2114
* don\'t create files on xmlsec-mscrypto when loading the key (bug #633924)
* clarify min OpenSSL requirements
* better detect private keys on ext RSA engines (bug #728213)
* fixed CRL check
* fixes for RH 6x
* fixed switch - added missed break keywords (bug #704574)
* fix memory leak in converting cert subject
* disable network access during internal xml transform parser
* fix typo (fixed bug 695605)
* disable ECDSA if needed (Daniel)
* docs rebuild- Changes for 1.2.19
* Added support for DSA-SHA256, ECDSA-SHA1, ECDSA-SHA224, ECDSA-SHA256, ECDSA-SHA384, ECDSA-SHA512 (Mak Kolybabi)
* GOST support for xmlsec-openssl (patch from Dmitry Belyavsky)
* Fri Jan 16 2015 jengelhAATTinai.de- Use source URL and set RPM group.
* Fri Dec 07 2012 alexandreAATTexatati.com.br- Update to 1.2.18:
* Fixed crasher in 64 bit (reported by Roumen)- Aditional changes from 1.2.17:
* Fixed security issue with libxslt (CVE-2011-1425, reported by Nicolas Gregoire)
* Fixed pkcs12 file loading (based on patch from Andre de Souza Pinto)
* Fixed comments (based on patch from Wolfgang Woehl)
* Fixed extra quotes in configure (bug #631258)
* Fixed configure issue with empty --with-libxml/libxsl and config scripts in /bin directory
* Fixed gcrypt init/shutdown (patch from Roumen)- Aditional changes from 1.2.16:
* Added X509Data support to xmlsec-gnutls
* Several patches from Roumen: support NSS/NSPR from seamonkey package; reorder libxmlsec as dep. lib for mingw; fix gcrypt/src/asn1.h include; fix Unicode build for mingw
* Added RSA/SHA1/SHA256/SHA384/SHA512/MD5/RIPEMD160 for xmlsec-gnutls
* Added DSA/SHA1 for xmlsec-gnutls
* Added RSA/SHA1/SHA256/SHA384/SHA512/MD5/RIPEMD160 for xmlsec-gcrypt
* Added DSA/SHA1 for xmlsec-gcrypt
* Added DES KW support for xmlsec-mscrypto
* Added DES KW support for xmlsec-gnutls
* Separated xmlsec-gnutls and xmlsec-gcrypt libraries
* Added AES KW support for xmlsec-mscrypto
* Added AES KW support for xmlsec-gnutls
* Added RSA/OAEP support for xmlsec-mscrypto- Aditional changes from 1.2.15:
* Converted xmlsec-mscrypto to unicode and provided a compile time option to switch between unicode/non-unicode builds
* Deleted support for old gnutls, new required version 2.8.0
* Added SHA256/384/512 support for xmlsec-gnutls
* Added support for HMAC with MD5, SHA1, SHA256/384/512 in xmlsec-mscrypto
* Added support for MD5 RSA/MD5 in xmlsec-mscrypto
* Added support for SHA256/384/512 for digest, HMAC and RSA in xmlsec-nss (requires nss 3.8 + nspr 4.3 or greater)
* Added support for MD5 for digest and RSA in xmlsec-nss
* Minor fixes to xmlsec-nss (xmlsec bug #118630), bumping nss min version to 3.9 + nspr 4.4.1 or greater Other minor fixes for xmlsec-nss
* Fix PK_CONFIG problem (reported by Roumen)
* Enable --crypto for transform checks
* Enable RSA/SHA2 support in xmlsec-mscrypto
* Misc. cleanups in xmlsec-mscrypto
* Fix PK_CONFIG problem (reported by Roumen)
* Fix DSA support in xmlsec-nss (https://bugzilla.mozilla.org/show_bug.cgi?id=561598)
* Fix search for certificates with UTF-8 subject on Windows in xmlsec-mscrypto
* Remove spaces at the end of lines
* Fix search for certificates with Unicode subject on Windows in xmlsec-mscrypto
* Copy
*.manifest files to installation for Windows builds
* Convert tabs to spaces
* Fix key name conversion to unicode problem in xmlsec-mscrypto
* Fix compile warnings in xmlsec-openssl
* Fix linking order issue (based on patch from Roumen)
* Fix typo Copyrigth -> Copyright
* Add xmlsec-mscrypto to the top level copyright file
* Refresh the copyright date to 2010
* Add references to licenses
* Ensure we have only one copy of key\'s cert after reading pkcs12 from openssl
* Fix valgrind\'s invalid read with chained XPath transforms (based on patch from Frank Gross).- Aditional changes from 1.2.14:
* Use installed ltdl on
*nix and native code on Windows
* Fix --with-libxslt-src (patch from Roumen)- Aditional changes from 1.2.13:
* Fix XML dump format
* fix build for openssl 1.0 (based on patch from Roumen Petrov)
* cleanup test invocation scripts
* cleanup configure.in
* fix a couple minor issues (based on patch from Arfrever Frehtes Taifersar Arahesis)
* Sun Jan 29 2012 jengelhAATTmedozas.de- Remove redundant tags/sections per specfile guideline suggestions- Parallel building using %_smp_mflags
* Tue Aug 11 2009 alexandreAATTexatati.com.br- Update to 1.2.12;- Disabled static libraries.
* Mon Jul 06 2009 alexandreAATTexatati.com.br- Initial package for OBS.