|
|
|
|
Changelog for p11-kit-nss-trust-0.25.5-security.72.3.i586.rpm :
* Fri Sep 13 2024 Pedro Monreal - Update to 0.25.5: * iter: fix recursive attribute loading * fix building on FreeBSD 14.0 (amd64) * Remove p11-kit-d938f4a8a3a2.patch upstream * Fri Sep 13 2024 Pedro Monreal - Update to 0.25.4: * rpc: add support for recursive attributes * p11-kit: add function to check run-time version of the library * p11-kit: expose version information through macros * p11-kit: add option to specify CKA_ID in generate-keypair and import-object commands * p11-kit: add --provider option to specify PKCS#11 module when using p11-kit commands * p11-kit: fix a bug where eddsa mechanism isn\'t recognized in generate-keypair * p11-kit: fallback to C_GetFunctionList when C_GetInterface returns CKR_FUNCTION_NOT_SUPPORTED * bug and build fixes * Fri Jul 26 2024 Martin Jambor - Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch to avoid passing an incompatible pointer type to a function which is an error by default in GCC 14. * Fri Nov 17 2023 Pedro Monreal - Update to 0.25.3: * rpc: fix serialization of NULL mechanism pointer [#601] * fix meson build failure in macOS (appleframeworks not found) [#603] * Thu Nov 02 2023 Pedro Monreal - Update to 0.25.2: * fix error code checking of readpassphrase for --login option [#595] * build fixes [#594] * test fixes [#596] * Fri Oct 27 2023 Pedro Monreal - Update to 0.25.1: * fix probing of C_GetInterface [#535] * p11-kit: add command to list tokens [#581] * p11-kit: add command to list mechanisms supported by a token [#576] * p11-kit: add command to generate private-public keypair on a token [#551, #582] * p11-kit: add commands to import/export certificates and public keys into/from a token [#543, #549, #568, #588] * p11-kit: add commands to list and delete objects of a token [#533, #544, #571] * p11-kit: add --login option to login into a token with object and profile management commands [#587] * p11-kit: adjust behavior of PKCS#11 profile management commands [#558, #560, #583, #591] * p11-kit: print PKCS#11 URIs in list-modules [#532] * bug and build fixes [#528 #529, #534, #537, #540, #541, #545, [#547], #550, #557, #572, #575, #579, #585, #586, #590] * test fixes [#553, #580] * Remove patch fixed upstream: - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch * Wed Sep 20 2023 Bjørn Lie - Add d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch: Fix probing of C_GetInterface. * Wed Sep 20 2023 Pedro Monreal - Update to 0.25.0: * add PKCS#11 3.0 support * add support for profile objects * add ability to adjust module and config paths at run-time via system environmental exports * make terminal output nicer * p11-kit: add command to print merged configuration * p11-kit: add commands to list, add and delete profiles of a token * trust: add command to check format of .p11-kit files * virtual: fix libffi type signatures for PKCS#11 3.0 functions * server: fix umask setting when --group is specified * server: check SHELL only when neither --sh nor --csh is specified * rpc: use space string in C_InitToken * rpc: fix two off-by-one errors identified by asan * modules: make logging message more translatable * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms * pkcs11.h: add IBM specific mechanism and attributes * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption * po: update translations from Transifex- Update upstream p11-kit.keyring file- Add missing lang files- Switch to using Meson as the build system * Mon Aug 08 2022 Dirk Müller - skip testsuite on qemu arches, it fails * Wed Mar 09 2022 Ludwig Nussel - make sure p11-kit components have matching versions (boo#1196812) * Tue Jan 25 2022 Bjørn Lie - Update to version 0.24.1: * rpc: Support protocol version negotiation. * proxy: Support copying attribute array recursively. * Link libp11-kit so that it cannot unload. * Translation improvements. * Build fixes. * Fri Dec 17 2021 Bjørn Lie - Update to version 0.24.0: * Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to \"blocklist\". * Fix issues spotted by coverity and ASan. * Integrate gettext with tools more tightly. * rpc: Forbid use of array of attributes. * Build fixes.- Change dirs from blacklist to blocklist ref upstream changes. * Mon Dec 13 2021 Ludwig Nussel - Enable systemd support * Sun Jan 17 2021 Dirk Müller - update to 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066, jsc#SLE-18495): * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes
|
|
|