Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package aws-lc for openSUSE:Factory checked in at 2026-04-14 17:49:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/aws-lc (Old) and /work/SRC/openSUSE:Factory/.aws-lc.new.21863 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "aws-lc" Tue Apr 14 17:49:50 2026 rev:20 rq:1346815 version:1.72.0 Changes: -------- --- /work/SRC/openSUSE:Factory/aws-lc/aws-lc.changes 2026-03-20 21:27:27.120580248 +0100 +++ /work/SRC/openSUSE:Factory/.aws-lc.new.21863/aws-lc.changes 2026-04-14 17:51:27.751334736 +0200 @@ -1,0 +2,44 @@ +Tue Apr 14 09:18:01 UTC 2026 - Richard Rahl <[email protected]> + +- Update to version 1.72.0: + + Reject point at infinity in EC_KEY_set_public_key + + Add SSL_use_cert_and_key for per-connection cert/key setting + + Add Optimized and HOL Light verified AVX2 Keccak x4 + + Fix intermittent WIN32_rename failures in openssl ca CLI tool due to + transient file locks + + Remove redundant definitions + + fipsmodule/ml-kem: Import mlkem-native v1.1.0 + + Zeroize sensitive stack buffers in DRBG, X25519, Ed25519, ECDSA, ECDH… + + Fix entropy source selection for Apple cross-compilation targets + + openssl-tool CLI: CA cleanup + + + + Remove redundant definitions + + fipsmodule/ml-kem: Import mlkem-native v1.1.0 + + Zeroize sensitive stack buffers in DRBG, X25519, Ed25519, ECDSA, ECDH… + + Fix entropy source selection for Apple cross-compilation targets + + openssl-tool CLI: CA cleanup + + Fix PostgreSQL integration SSL test failures for upstream error string + changes + + Hardening fixes for ML-DSA digest mode, XTS key comparison, and urandom + + Fix bind9 integration test for upstream build system changes + + Consistently set outlen to zero for all error paths + + Add -msg and -servername support to openssl s_client + + Add NULL pointer validation to ML-KEM EVP encapsulate/decapsulate + + Add openssl version -a and -p flag support + + Rename __AWS_LC_ENSURE to AWS_LC_ENSURE to avoid reserved identifier + + Upgrade custom libc++ to LLVM 19 and add sanitizer support to + build_and_test.sh + + Update PyOpenSSL patch + + Harden OCSP response printing and fix integer overflow in + x509v3_bytes_to_hex + + Small fixes for RSA_METHOD and EVP_PKEY_derive_set_peer + + Add OPENSSL_INIT_ATFORK compatibility stub + + Bound ReadConsoleW by stack buffer size + + Change ML-KEM PKCS#8 encoding from expanded to seed form + + Add missing error return for short metadata keys + + Lower default SSL peek test rounds and remove CI workarounds + + Check RSA-PSS digest algorithms for X509 + + Update target.h to support Loongarch64 ABI1.0 architecture + + Make some more half-empty EVP_PKEY states impossible + +------------------------------------------------------------------- Old: ---- aws-lc-1.71.0.obscpio New: ---- aws-lc-1.72.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ aws-lc.spec ++++++ --- /var/tmp/diff_new_pack.S0wouw/_old 2026-04-14 17:51:29.651413280 +0200 +++ /var/tmp/diff_new_pack.S0wouw/_new 2026-04-14 17:51:29.651413280 +0200 @@ -19,7 +19,7 @@ %define sover 0 %define __builder ninja Name: aws-lc -Version: 1.71.0 +Version: 1.72.0 Release: 0 Summary: Checksums package for AWS SDK for C License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.S0wouw/_old 2026-04-14 17:51:29.711415760 +0200 +++ /var/tmp/diff_new_pack.S0wouw/_new 2026-04-14 17:51:29.719416091 +0200 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://github.com/aws/aws-lc</param> - <param name="revision">refs/tags/v1.71.0</param> + <param name="revision">refs/tags/v1.72.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="submodules">enable</param> ++++++ aws-lc-1.71.0.obscpio -> aws-lc-1.72.0.obscpio ++++++ /work/SRC/openSUSE:Factory/aws-lc/aws-lc-1.71.0.obscpio /work/SRC/openSUSE:Factory/.aws-lc.new.21863/aws-lc-1.72.0.obscpio differ: char 49, line 1 ++++++ aws-lc.obsinfo ++++++ --- /var/tmp/diff_new_pack.S0wouw/_old 2026-04-14 17:51:29.787418902 +0200 +++ /var/tmp/diff_new_pack.S0wouw/_new 2026-04-14 17:51:29.791419068 +0200 @@ -1,5 +1,5 @@ name: aws-lc -version: 1.71.0 -mtime: 1773942882 -commit: 47389586f8aa77c83245173793f4d44ed1d6c3a8 +version: 1.72.0 +mtime: 1776118113 +commit: d50ded594c835fd277997461815ad473949f2c7a ++++++ skip-test.patch ++++++ --- /var/tmp/diff_new_pack.S0wouw/_old 2026-04-14 17:51:29.811419894 +0200 +++ /var/tmp/diff_new_pack.S0wouw/_new 2026-04-14 17:51:29.819420225 +0200 @@ -1,16 +1,18 @@ diff --git a/util/all_tests.json b/util/all_tests.json -index 9f80db391..60cb87dfc 100644 +index bbe879c0..86b1faca 100644 --- a/util/all_tests.json +++ b/util/all_tests.json -@@ -150,10 +150,5 @@ +@@ -146,12 +146,5 @@ "cmd": [ "crypto/rwlock_static_init" ] - }, - { +- "comment": "tool_openssl_test generates 100+ RSA keys across its test suite (ca_test, req_test, genrsa_test, etc.). Sharding is required to keep Valgrind runtime manageable.", - "cmd": [ - "tool-openssl/tool_openssl_test" -- ] +- ], +- "shard": true } ] ++++++ vendor.tar.gz ++++++
