Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package pesign-obs-integration for
openSUSE:Factory checked in at 2021-03-29 18:21:15
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/pesign-obs-integration (Old)
and /work/SRC/openSUSE:Factory/.pesign-obs-integration.new.2401 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pesign-obs-integration"
Mon Mar 29 18:21:15 2021 rev:43 rq:880645 version:10.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/pesign-obs-integration/pesign-obs-integration.changes
2020-12-23 14:21:10.441721864 +0100
+++
/work/SRC/openSUSE:Factory/.pesign-obs-integration.new.2401/pesign-obs-integration.changes
2021-03-29 18:21:16.798231678 +0200
@@ -1,0 +2,6 @@
+Fri Mar 19 03:45:11 UTC 2021 - Gary Ching-Pang Lin <g...@suse.com>
+
+- Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
+ to fix the potential hash mismatching (bsc#1183747)
+
+-------------------------------------------------------------------
New:
----
pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ pesign-obs-integration.spec ++++++
--- /var/tmp/diff_new_pack.CHfUuc/_old 2021-03-29 18:21:17.646232546 +0200
+++ /var/tmp/diff_new_pack.CHfUuc/_new 2021-03-29 18:21:17.650232550 +0200
@@ -1,7 +1,7 @@
#
# spec file for package pesign-obs-integration
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -25,6 +25,7 @@
Group: Development/Tools/Other
URL: https://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
Source: %{name}-%{version}.tar.gz
+Patch1: pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
BuildRequires: openssl
Requires: fipscheck
Requires: mozilla-nss-tools
++++++ pesign-obs-integration-bsc1183747-always-pad-efi-images.patch ++++++
>From 8177d2b826f848dd3feb4be28ed3c024d6cb7f43 Mon Sep 17 00:00:00 2001
From: Gary Lin <g...@suse.com>
Date: Fri, 19 Mar 2021 11:41:49 +0800
Subject: [PATCH] Always pad the EFI image when calculating the hash
Fix bsc#1183747
Signed-off-by: Gary Lin <g...@suse.com>
---
pesign-repackage.spec.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 76732b5..ccb35af 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -139,7 +139,7 @@ for sig in "${sigs[@]}"; do
pesign -n "$nss_db" -c cert -i "$f" -o "$f.tmp" -d sha256 -I
"${infile}.sattrs" -R "$sig"
rm -f "${infile}.sattrs"
mv "$f.tmp" "$f"
- nhash=$(pesign -n "$nss_db" -h -i "$f")
+ nhash=$(pesign -n "$nss_db" -h -P -i "$f")
if test "$ohash" != "$nhash" ; then
echo "hash mismatch error: $ohash $nhash"
exit 1
--
2.29.2
