Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libp11 for openSUSE:Factory checked in at 2026-10-26 10:00:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libp11 (Old) and /work/SRC/openSUSE:Factory/.libp11.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libp11" Mon Oct 26 10:00:11 2026 rev:44 rq:1392379 version:0.4.21 Changes: -------- --- /work/SRC/openSUSE:Factory/libp11/libp11.changes 2026-02-09 15:35:57.646196327 +0100 +++ /work/SRC/openSUSE:Factory/.libp11.new.2252680/libp11.changes 2026-10-26 10:01:00.704253030 +0100 @@ -1,0 +2,49 @@ +Sun Oct 25 10:36:54 UTC 2026 - Dirk Müller <[email protected]> + +- update to 0.4.21: + * Added PKCS#11 provider support for `openssl genpkey` + * Added the PKCS11_generate_key_ext() API + * Added the PKCS11_CTX_set_pkey_callback() API + * Removed incorrect `fips=yes` properties from provider + algorithms + * Isolated ENGINE EVP_PKEY methods from unrelated OpenSSL keys + * Fixed ENGINE EVP_PKEY method races and lifetime issues + * Fixed public-key association for generated key pairs with + duplicate CKA_ID values + * Added all-zero shared-secret checks for X25519 and X448 + * Fixed a provider EC public-point NULL dereference with + affected OpenSSL 3.x versions + * Fixed building with OpenSSL 1.0.2 + * Improved Git build and RSA-OAEP documentation + * Added PKCS#11 3.2 interface discovery and updated the bundled + header to version 3.2 + * Added PKCS#11 provider support for ML-KEM-512, ML-KEM-768 and + ML-KEM-1024 key generation, encapsulation and decapsulation + * Added the PKCS11_evp_pkey_decapsulate() API + * Added provider signature AlgorithmIdentifier support, + including RSA-PSS parameters and correct default salt length + handling + * Fixed RSA-PSS salt length parsing and spurious OpenSSL errors + * Fixed session-pool races and deadlocks during concurrent key + generation and cryptographic operations + * Fixed key-cache and OpenSSL 1.x RSA object use-after-free + bugs + * Fixed provider EC parameter lifetime handling and resource + leaks during EC, RSA, EdDSA and XDH operations and context + cleanup + * Added native KEYMGMT, SIGNATURE and ASYM_CIPHER operations to + the PKCS#11 provider, enabling OpenSSL 4.x support and + improving RSA interoperability + * Added support for ML-DSA, SLH-DSA and FALCON key generation, + signing and verification + * Added PQC key generation examples and provider tests + * Added PKCS#11 provider support for ECDH, X25519 and X448 key + exchange, including X25519 and X448 key generation + * Improved Ed25519 and Ed448 public-key resolution with + certificate fallback + * Fixed use-after-free crashes after enumerating additional + PKCS#11 keys + * Fixed a potential out-of-bounds write while parsing PKCS#11 + URI attributes + +------------------------------------------------------------------- Old: ---- libp11-0.4.17.tar.gz libp11-0.4.17.tar.gz.asc New: ---- libp11-0.4.21.tar.gz libp11-0.4.21.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libp11.spec ++++++ --- /var/tmp/diff_new_pack.RLt9fg/_old 2026-10-26 10:01:01.492286092 +0100 +++ /var/tmp/diff_new_pack.RLt9fg/_new 2026-10-26 10:01:01.494286176 +0100 @@ -1,7 +1,7 @@ # # spec file for package libp11 # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -26,7 +26,7 @@ %define libname libp11-3 %endif Name: libp11 -Version: 0.4.17 +Version: 0.4.21 Release: 0 Summary: Library Implementing a Small Layer on Top of PKCS#11 API License: LGPL-2.1-or-later ++++++ libp11-0.4.17.tar.gz -> libp11-0.4.21.tar.gz ++++++ ++++ 39746 lines of diff (skipped)
