Changelog for
osslsigncode-2.3.0-bp157.1.2.x86_64.rpm :
* Sun Apr 10 2022 Dirk Müller
- update to 2.3.0:
* This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files.
* fixed non-interactive PVK (MSBLOB) key decryption
* added a bash completion script
* added CA bundle path auto-detection
* CAT files support (thanks to James McKenzie)
* MSI support rewritten without libgsf dependency, which allows
* for handling of all the needed MSI metadata, such as dates
* \"-untrusted\" option renamed to \"-TSA-CAfile\"
* \"-CRLuntrusted\" option renamed to \"-TSA-CRLfile\"
* numerous bug fixes and improvements
* certificate chain verification support
* timestamp verification support
* CRL verification support (\"-CRLfile\" option)
* improved CAB signature support
* nested signatures support
* user-specified signing time (\"-st\" option) by vszakats
* added more tests
* fixed numerous bugs
* dropped OpenSSL 1.1.0 support
* orphaned project adopted by Michał Trojnara
* ported to OpenSSL 1.1.x
* ported to SoftHSM2
* add support for pkcs11-based hardware tokens
* improved error reporting of timestamping errors- drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete)- add gpg validation
* Mon Nov 12 2018 meissnerAATTsuse.com- license is now GPL 3.0
* Wed Oct 24 2018 Cristian Rodríguez - 0001-Make-code-work-with-OpenSSL-1.1.patch: Build against openssl 1.1.
* Wed Dec 20 2017 fcrozatAATTsuse.com- Adapt BuildRequires to libopenssl-1_0_0-devel for SLE15 / TW.
* Mon Oct 05 2015 idonmezAATTsuse.com- Add libgsf-devel dependency to enable MSI support.
* Sun Mar 08 2015 p.drouandAATTgmail.com- Update to version 1.7.1
* MSI: added -add-msi-dse option
* MSI: fix build when GSF_CAN_READ_MSI_METADATA defined- Add autoconf, automake and pkg-config BuildRequire; new dependencies- Move to pkg-config depend style
* Wed Jan 23 2013 fcrozatAATTsuse.com- Initial package for openSUSE (based on James Bottomley package).
