Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libressl for openSUSE:Factory checked in at 2026-01-31 16:17:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libressl (Old) and /work/SRC/openSUSE:Factory/.libressl.new.1995 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libressl" Sat Jan 31 16:17:25 2026 rev:73 rq:1330100 version:4.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libressl/libressl.changes 2025-09-01 17:19:44.490881396 +0200 +++ /work/SRC/openSUSE:Factory/.libressl.new.1995/libressl.changes 2026-01-31 16:17:30.604941155 +0100 @@ -1,0 +2,34 @@ +Fri Jan 30 21:26:20 UTC 2026 - Jan Engelhardt <[email protected]> + +- Make the build succeed on s390x. + +------------------------------------------------------------------- +Wed Jan 28 10:14:04 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 4.2.1 + * Ensure the group selected by a TLSv1.3 server for a + HelloRetryRequest is not one for which the client has already + sent a key share. + +------------------------------------------------------------------- +Wed Oct 15 10:27:46 UTC 2025 - Jan Engelhardt <[email protected]> + +- Update to release 4.2.0 + * Removed the -msie_hack option from the openssl(1) ca + subcommand. + * Removed parameters of the 239-bit prime curves from X9.62, + H.5.2: prime239v1, prime239v2, prime239v3. + * Increased default MAC salt length used by PKCS12_set_mac(3) to + 16 per recommendation of NIST SP 800-132. + * Encrypted PKCS#8 key files now use a default password-based key + derivation function that is acceptable in the present + millenium. + * const corrected EVP_PKEY_get{0,1}_{DH,DSA,EC_KEY,RSA}(). + * X509_CRL_verify() now checks that the AlgorithmIdentifiers in + the signature and the tbsCertList are identical. + * Of the old *err() only PEMerr(), RSAerr(), and SSLerr() remain. + * Removed BIO_s_log(), X509_PKEY_{new,free}(), + PEM_X509_INFO_read() and PEM_X509_INFO_write_bio(). + * Re-expose the ASN.1 Boolean template items. + +------------------------------------------------------------------- Old: ---- libressl-4.1.0.tar.gz libressl-4.1.0.tar.gz.asc New: ---- libressl-4.2.1.tar.gz libressl-4.2.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libressl.spec ++++++ --- /var/tmp/diff_new_pack.wCMlvZ/_old 2026-01-31 16:17:31.872993839 +0100 +++ /var/tmp/diff_new_pack.wCMlvZ/_new 2026-01-31 16:17:31.876994005 +0100 @@ -16,7 +16,7 @@ # Name: libressl -Version: 4.1.0 +Version: 4.2.1 Release: 0 Summary: An SSL/TLS protocol implementation License: OpenSSL @@ -45,31 +45,31 @@ Transport Layer Security (TLS) protocols. It derives from OpenSSL, with refactorings. -%package -n libcrypto56 +%package -n libcrypto57 Summary: An SSL/TLS protocol implementation Group: System/Libraries -%description -n libcrypto56 +%description -n libcrypto57 The "crypto" library implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the LibreSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement SSH, OpenPGP, and other cryptographic standards. -%package -n libssl59 +%package -n libssl60 Summary: An SSL/TLS protocol implementation Group: System/Libraries -%description -n libssl59 +%description -n libssl60 LibreSSL is an implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL, with refactorings. -%package -n libtls32 +%package -n libtls33 Summary: A simplified interface for the OpenSSL/LibreSSL TLS protocol implementation Group: System/Libraries -%description -n libtls32 +%description -n libtls33 LibreSSL is an implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL, with refactorings. @@ -80,9 +80,9 @@ %package devel Summary: Development files for LibreSSL, an SSL/TLS protocol implementation Group: Development/Libraries/C and C++ -Requires: libcrypto56 = %version -Requires: libssl59 = %version -Requires: libtls32 = %version +Requires: libcrypto57 = %version +Requires: libssl60 = %version +Requires: libtls33 = %version Conflicts: ssl-devel Provides: ssl-devel @@ -118,6 +118,15 @@ cp %_sourcedir/unavail* . %build +%ifarch s390x +# libressl can work without any arch-specific code whatsoever. The makefiles +# contain a bunch of `if PPC64 { CPPFLAGS+=-Icrypto/arch/ppc64 }`-style lines, +# for various archs, but no "else" clause, so there is no functioning fallback. +# The following adds this fallback. +# +touch crypto/crypto_arch.h crypto/bn/bn_arch.h +%endif + autoreconf -fi %configure --enable-libtls --with-openssldir="%_sysconfdir/libressl" %make_build @@ -140,6 +149,8 @@ rm -v "%buildroot/%_sysconfdir/libressl/cert.pem" rm -fv "%buildroot/%_libdir"/*.a "%buildroot/%_libdir"/*.la +find "%buildroot/%_mandir" -type l -exec perl -e 'for (@ARGV) { next if(!-l $_); $t=readlink$_; unlink if(!-e $t); }' '{}' '+' + %check if ! %make_build check; then cat tests/test-suite.log @@ -147,9 +158,9 @@ #exit 1 fi -%ldconfig_scriptlets -n libcrypto56 -%ldconfig_scriptlets -n libssl59 -%ldconfig_scriptlets -n libtls32 +%ldconfig_scriptlets -n libcrypto57 +%ldconfig_scriptlets -n libssl60 +%ldconfig_scriptlets -n libtls33 %files # openssl's config (syntax) is incompatible with libressl, @@ -164,13 +175,13 @@ %_mandir/man8/*.8* %doc COPYING -%files -n libcrypto56 +%files -n libcrypto57 %_libdir/libcrypto.so.* -%files -n libssl59 +%files -n libssl60 %_libdir/libssl.so.* -%files -n libtls32 +%files -n libtls33 %_libdir/libtls.so.* %files devel ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.wCMlvZ/_old 2026-01-31 16:17:31.912995501 +0100 +++ /var/tmp/diff_new_pack.wCMlvZ/_new 2026-01-31 16:17:31.916995667 +0100 @@ -1,5 +1,5 @@ -mtime: 1756733137 -commit: 9295c1dd84281123f12729d0707b2dbba433eb92c3b1282173b4589d3279909b +mtime: 1769808394 +commit: e8616760569b8ccdced66e2ff91c0e2baef2e8f678f59a9f027d956a78298129 url: https://src.opensuse.org/jengelh/libressl revision: master ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.wCMlvZ/_old 2026-01-31 16:17:31.936996498 +0100 +++ /var/tmp/diff_new_pack.wCMlvZ/_new 2026-01-31 16:17:31.940996664 +0100 @@ -1,10 +1,10 @@ -libcrypto56 -libssl59 -libtls32 +libcrypto57 +libssl60 +libtls33 libressl-devel requires -libressl-<targettype> - requires "libcrypto56-<targettype> = <version>" - requires "libssl59-<targettype> = <version>" - requires "libtls32-<targettype> = <version>" + requires "libcrypto57-<targettype> = <version>" + requires "libssl60-<targettype> = <version>" + requires "libtls33-<targettype> = <version>" conflicts "libopenssl-devel-<targettype>" ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-01-30 22:26:48.000000000 +0100 @@ -0,0 +1 @@ +.osc ++++++ extra-symver.diff ++++++ --- /var/tmp/diff_new_pack.wCMlvZ/_old 2026-01-31 16:17:32.145005141 +0100 +++ /var/tmp/diff_new_pack.wCMlvZ/_new 2026-01-31 16:17:32.149005306 +0100 @@ -23,12 +23,12 @@ tls/Makefile.am | 6 +++++- 3 files changed, 15 insertions(+), 3 deletions(-) -Index: libressl-3.8.2/crypto/Makefile.am +Index: libressl-4.2.0/crypto/Makefile.am =================================================================== ---- libressl-3.8.2.orig/crypto/Makefile.am -+++ libressl-3.8.2/crypto/Makefile.am -@@ -62,8 +62,11 @@ libcrypto_la_objects.mk: Makefile - | sed 's/compat\// $$\(abs_top_builddir\)\/crypto\/&/g' \ +--- libressl-4.2.0.orig/crypto/Makefile.am ++++ libressl-4.2.0/crypto/Makefile.am +@@ -81,8 +81,11 @@ libcrypto_la_objects.mk: Makefile + | sed 's/compat\// $$\(top_builddir\)\/crypto\/&/g' \ >> libcrypto_la_objects.mk -libcrypto_la_LDFLAGS = -version-info @LIBCRYPTO_VERSION@ -no-undefined -export-symbols crypto_portable.sym @@ -41,11 +41,11 @@ EXTRA_libcrypto_la_DEPENDENCIES += libcrypto_la_objects.mk libcrypto_la_LIBADD = libcompat.la if !HAVE_EXPLICIT_BZERO -Index: libressl-3.8.2/ssl/Makefile.am +Index: libressl-4.2.0/ssl/Makefile.am =================================================================== ---- libressl-3.8.2.orig/ssl/Makefile.am -+++ libressl-3.8.2/ssl/Makefile.am -@@ -35,6 +35,11 @@ remove_bs_objects: libssl.la +--- libressl-4.2.0.orig/ssl/Makefile.am ++++ libressl-4.2.0/ssl/Makefile.am +@@ -51,6 +51,11 @@ remove_bs_objects: libssl.la libssl_la_CPPFLAGS = -I$(top_srcdir)/ssl/hidden ${AM_CPPFLAGS} libssl_la_LDFLAGS = -version-info @LIBSSL_VERSION@ -no-undefined -export-symbols $(top_srcdir)/ssl/ssl.sym @@ -57,12 +57,12 @@ libssl_la_LIBADD = $(abs_top_builddir)/crypto/libcrypto.la $(PLATFORM_LDADD) libssl_la_LIBADD += $(libcompat_la_objects) libssl_la_LIBADD += $(libcompatnoopt_la_objects) -Index: libressl-3.8.2/tls/Makefile.am +Index: libressl-4.2.0/tls/Makefile.am =================================================================== ---- libressl-3.8.2.orig/tls/Makefile.am -+++ libressl-3.8.2/tls/Makefile.am -@@ -19,7 +19,11 @@ libtls_la_objects.mk: Makefile - | sed -e 's/ *$$//' -e 's/ */ $$\(abs_top_builddir\)\/tls\//g' \ +--- libressl-4.2.0.orig/tls/Makefile.am ++++ libressl-4.2.0/tls/Makefile.am +@@ -34,7 +34,11 @@ libtls_la_objects.mk: Makefile + | sed -e 's/ *$$//' -e 's/ */ $$\(top_builddir\)\/tls\//g' \ > libtls_la_objects.mk -libtls_la_LDFLAGS = -version-info @LIBTLS_VERSION@ -no-undefined -export-symbols $(top_srcdir)/tls/tls.sym ++++++ libressl-4.1.0.tar.gz -> libressl-4.2.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/libressl/libressl-4.1.0.tar.gz /work/SRC/openSUSE:Factory/.libressl.new.1995/libressl-4.2.1.tar.gz differ: char 31, line 1
