Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package liboqs for openSUSE:Factory checked in at 2024-12-13 22:31:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/liboqs (Old) and /work/SRC/openSUSE:Factory/.liboqs.new.29675 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "liboqs" Fri Dec 13 22:31:45 2024 rev:15 rq:1230161 version:0.12.0 Changes: -------- --- /work/SRC/openSUSE:Factory/liboqs/liboqs.changes 2024-10-03 18:00:07.833563991 +0200 +++ /work/SRC/openSUSE:Factory/.liboqs.new.29675/liboqs.changes 2024-12-13 22:32:38.831832561 +0100 @@ -1,0 +2,28 @@ +Tue Dec 10 07:51:25 UTC 2024 - Marcus Meissner <meiss...@suse.com> + +- Updated to 0.12.0: + - This release updates the ML-DSA implementation to the [final + FIPS 204](https://csrc.nist.gov/pubs/fips/204/final) version. This + release still includes the NIST Round 3 version of Dilithium for + interoperability purposes, but we plan to remove Dilithium Round 3 in + a future release. + + - This will be the last release of liboqs to include Kyber (that is, + the NIST Round 3 version of Kyber, prior to its standardization by NIST + as ML-KEM in FIPS 203). Applications should switch to ML-KEM (FIPS 203). + + - The addition of ML-DSA FIPS 204 final version to liboqs has + introduced a new signature API which includes a context string + parameter. We are planning to remove the old version of the API + without a context string in the next release to streamline the + API and bring it in line with NIST specifications. Users who + have an opinion on this removal are invited to provide input at + https://github.com/open-quantum-safe/liboqs/issues/2001. + + Security issues: + + - CVE-2024-54137: Fixed bug in HQC decapsulation that leads to incorrect + shared secret value during decapsulation when called with an invalid + ciphertext. (bsc#1234292) + +------------------------------------------------------------------- Old: ---- 0.11.0.tar.gz New: ---- 0.12.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ liboqs.spec ++++++ --- /var/tmp/diff_new_pack.mZgk09/_old 2024-12-13 22:32:39.331853414 +0100 +++ /var/tmp/diff_new_pack.mZgk09/_new 2024-12-13 22:32:39.335853581 +0100 @@ -17,7 +17,7 @@ Name: liboqs -Version: 0.11.0 +Version: 0.12.0 Release: 0 Summary: C library for quantum-resistant cryptographic algorithms License: MIT @@ -35,18 +35,18 @@ liboqs is a C library for quantum-resistant cryptographic algorithms. See the bundled README.md for particular limitations on intended use. -%package -n liboqs6 +%package -n liboqs7 Summary: C library for quantum-resistant cryptographic algorithms Group: System/Libraries -%description -n liboqs6 +%description -n liboqs7 liboqs is a C library for quantum-resistant cryptographic algorithms. See the bundled README.md for particular limitations on intended use. %package devel Summary: Headers for liboqs, a library for quantum-resistant cryptography Group: Development/Languages/C and C++ -Requires: liboqs6 = %{version} +Requires: liboqs7 = %{version} %description devel liboqs is a C library for quantum-resistant cryptographic algorithms. @@ -78,13 +78,13 @@ rmdir %{buildroot}%{_prefix}/local/ -%post -n liboqs6 -p /sbin/ldconfig -%postun -n liboqs6 -p /sbin/ldconfig +%post -n liboqs7 -p /sbin/ldconfig +%postun -n liboqs7 -p /sbin/ldconfig -%files -n liboqs6 +%files -n liboqs7 %license LICENSE.txt %{_libdir}/liboqs.so.%version -%{_libdir}/liboqs.so.6 +%{_libdir}/liboqs.so.7 %doc README.md %files devel ++++++ 0.11.0.tar.gz -> 0.12.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/liboqs/0.11.0.tar.gz /work/SRC/openSUSE:Factory/.liboqs.new.29675/0.12.0.tar.gz differ: char 23, line 1 ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.mZgk09/_old 2024-12-13 22:32:39.379855416 +0100 +++ /var/tmp/diff_new_pack.mZgk09/_new 2024-12-13 22:32:39.383855583 +0100 @@ -1,3 +1,3 @@ -liboqs6 +liboqs7 liboqs-devel
