1

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

- Update to 1.10.16 (Fixes CVE-2017-2801, bsc#1033605) (forwarded request 487836 from dmolkentin)

• Files Changed
• Browse Source

Fix the last known security bug

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

Fix paths

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

- Fix Source0 URL

- bump SONAME to libbotan-1_10-1
- Update to 1.10.10
  * SECURITY: The BER decoder would crash due to reading from offset 0
    of an empty vector if it encountered a BIT STRING which did not
    contain any data at all. As the type requires a 1 byte field this
    is not valid BER but could occur in malformed data. Found with
    afl. CVE-2015-5726
  * SECURITY: The BER decoder would allocate a fairly arbitrary amount
    of memory in a length field, even if there was no chance the read
    request would succeed. This might cause the process to run out of
    memory or invoke the OOM killer. Found with afl. CVE-2015-5727
  * Due to an ABI incompatible (though not API incompatible) change in
    this release, the version number of the shared object has been
    increased.
  * The default TLS policy no longer allows RC4.
  * Fix a signed integer overflow in Blue Midnight Wish that may cause
    incorrect computations or undefined behavior.
- Update to 1.10.9
  * Fixed EAX tag verification to run in constant time
  * The default TLS policy now disables SSLv3.
  * A crash could occur when reading from a blocking random device if
    the device initially indicated that entropy was available but a
    concurrent process drained the entropy pool before the read was
    initiated.
  * Fix decoding indefinite length BER constructs that contain a
    context sensitive tag of zero. Github pull 26 from Janusz Chorko.
  * The botan-config script previously tried to guess its prefix from
    the location of the binary. However this was error prone, and now

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

Split 13.2 from Factory

• Files Changed
• Browse Source

- Update to 1.10.8
  * Fix a bug in primality testing introduced in 1.8.3 which caused
    only a single random base, rather than a sequence of random bases,
    to be used in the Miller-Rabin test. This increased the
    probability that a non-prime would be accepted, for instance a
    1024 bit number would be incorrectly classed as prime with
    probability around 2^-40. Reported by Jeff Marrison.
  * The key length limit on HMAC has been raised to 512 bytes,
    allowing the use of very long passphrases with PBKDF2.
- Update to 1.10.7
  * OAEP had two bugs, one of which allowed it to be used even if the
    key was too small, and the other of which would cause a crash
    during decryption if the EME data was too large for the associated
    key. (forwarded request 233310 from netsroth)

• Files Changed
• Browse Source

- change license to BSD-2-Clause as requested by legal (forwarded request 224433 from oertel)

• Files Changed
• Browse Source

- Add ppc64le architecture
- added patches:
  * ppc64le-support.patch (forwarded request 209893 from k0da)

• Files Changed
• Browse Source

Update Botan to 1.10.6 (forwarded request 206590 from netsroth)

• Files Changed
• Browse Source

Split 13.1 from Factory

• Files Changed
• Browse Source

Update to 1.10.5 (forwarded request 159650 from cgiboudeaux)

• Files Changed
• Browse Source

- aarch64-support.patch: add support for aarch64

• Files Changed
• Browse Source

Split 12.3 from Factory

• Files Changed
• Browse Source

Needed for upcoming qt-creator

• Files Changed
• Browse Source