File pam_pkcs11.changes of Package pam_pkcs11

Overview Repositories Revisions Requests Users Attributes Meta

File pam_pkcs11.changes of Package pam_pkcs11 (Revision 243ed05f481e470d8112ee2939c72706)

Currently displaying revision 243ed05f481e470d8112ee2939c72706 , Show latest

-------------------------------------------------------------------
Sat Jan 15 10:26:28 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>

- update to 0.6.12:
  * Limit signature length to 65536 bytes
  * A number of bug fixes and OpenSSL compatibility updates
  * console output color updates
  * Add support of ECDSA signature in addition to RSA

-------------------------------------------------------------------
Thu Oct 14 10:34:54 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * pkcs11_eventmgr.service

-------------------------------------------------------------------
Tue Jan 29 22:45:28 CET 2019 - sbrabec@suse.com

- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.

-------------------------------------------------------------------
Fri Aug 17 10:12:31 UTC 2018 - vcizek@suse.com

- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch

-------------------------------------------------------------------
Mon Jul 23 17:36:18 CEST 2018 - sbrabec@suse.com

- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).

-------------------------------------------------------------------
Sun Sep 10 00:08:17 UTC 2017 - jengelh@inai.de

- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.

-------------------------------------------------------------------
Wed Aug  9 15:08:07 UTC 2017 - astieger@suse.com

- add service file bsc#1049219

-------------------------------------------------------------------
Thu Jul 20 18:02:57 CEST 2017 - sbrabec@suse.com

- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.

-------------------------------------------------------------------
Tue Feb  9 19:02:43 UTC 2016 - antoine.belvire@laposte.net

- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)

-------------------------------------------------------------------
Tue Jul 10 17:24:56 CEST 2012 - sbrabec@suse.cz

- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.

-------------------------------------------------------------------
Tue Feb 28 19:54:16 CET 2012 - sbrabec@suse.cz

- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.

-------------------------------------------------------------------
Wed Jan  5 18:40:44 CET 2011 - sbrabec@suse.cz

- Updated to version 0.6.6:
  * Compatible with pcsc-lite-1.6.
  * New mapper API.
  * Minor fixes.
  * Translaton updates.

-------------------------------------------------------------------
Mon Feb  1 12:20:03 UTC 2010 - jengelh@medozas.de

- package baselibs.conf

-------------------------------------------------------------------
Wed Aug  5 15:55:31 CEST 2009 - sbrabec@suse.cz

- Updated to version 0.6.1:
  * Added functions to API.
  * Fixes from openSUSE packages upstreamed.
  * Minor fixes.
  * Translaton updates.

-------------------------------------------------------------------
Thu Jun 25 12:41:19 CEST 2009 - sbrabec@suse.cz

- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).

-------------------------------------------------------------------
Wed Oct 15 18:30:29 CEST 2008 - sbrabec@suse.cz

- Fixed all implicit declarations.

-------------------------------------------------------------------
Tue Sep 23 17:49:42 CEST 2008 - sbrabec@suse.cz

- Fixed uninitialized variable (bnc#351207).

-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de

- added baselibs.conf file to build xxbit packages
  for multilib support

-------------------------------------------------------------------
Thu Sep  6 21:08:43 CEST 2007 - jberkman@novell.com

- use the same directory for nssdb as the kerberos pkinit plugin

-------------------------------------------------------------------
Tue Jul 31 17:34:21 CEST 2007 - sbrabec@suse.cz

- Build with NSS instead of openssl.
- Applied patches from Jacob Berkman: MS UPN OID and NSS
  configuration.
- Fixed implicit declaration.

-------------------------------------------------------------------
Thu Jul 26 14:32:24 CEST 2007 - sbrabec@suse.cz

- Updated to version 0.6.0:
  * compiler warning fixes
  * I18N support
  * new configuration options
  * support for new environment variables
  * new tool pkcs11_setup
  * support for the NSS crypto libraries (off by default)
  * for more changes see ChangeLog.svn

-------------------------------------------------------------------
Fri May 12 16:18:38 CEST 2006 - sbrabec@suse.cz

- New SuSE package, version 0.5.3.

Places

File pam_pkcs11.changes of Package pam_pkcs11 (Revision 243ed05f481e470d8112ee2939c72706)

Places