Hello community, here is the log from the commit of package libressl for openSUSE:Factory checked in at 2018-03-28 10:31:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libressl (Old) and /work/SRC/openSUSE:Factory/.libressl.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libressl" Wed Mar 28 10:31:08 2018 rev:37 rq:591042 version:2.7.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libressl/libressl.changes 2017-12-29 18:51:10.476329306 +0100 +++ /work/SRC/openSUSE:Factory/.libressl.new/libressl.changes 2018-03-28 10:31:12.953402788 +0200 @@ -1,0 +2,29 @@ +Mon Mar 26 11:27:48 UTC 2018 - [email protected] + +- Update to new upstream release 2.7.1 + * Fixed a bug in int_x509_param_set_hosts, calling strlen() if + name length provided is 0 to match the OpenSSL behaviour. + [CVE-2018-8970, boo#1086778] + +------------------------------------------------------------------- +Fri Mar 23 12:03:54 UTC 2018 - [email protected] + +- Update to new upstream release 2.7.0 + * Added support for many OpenSSL 1.0.2 and 1.1 APIs. + * Added support for automatic library initialization in + libcrypto, libssl, and libtls. + * Converted more packet handling methods to CBB, which improves + resiliency when generating TLS messages. + * Completed TLS extension handling rewrite, improving consistency + of checks for malformed and duplicate extensions. + * Rewrote ASN1_TYPE_ get,set _octetstring() using templated + ASN.1. This removes the last remaining use of the old M_ASN1_ + macros (asn1_mac.h) from API that needs to continue to exist. + * Added support for client-side session resumption in libtls. + * A libtls client can specify a session file descriptor (a + regular file with appropriate ownership and permissions) and + libtls will manage reading and writing of session data across + TLS handshakes. + * Merged more DTLS support into the regular TLS code path. + +------------------------------------------------------------------- Old: ---- libressl-2.6.4.tar.gz libressl-2.6.4.tar.gz.asc New: ---- libressl-2.7.1.tar.gz libressl-2.7.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libressl.spec ++++++ --- /var/tmp/diff_new_pack.noqox3/_old 2018-03-28 10:31:14.161359345 +0200 +++ /var/tmp/diff_new_pack.noqox3/_new 2018-03-28 10:31:14.165359200 +0200 @@ -17,13 +17,14 @@ Name: libressl -Version: 2.6.4 +Version: 2.7.1 Release: 0 Summary: An SSL/TLS protocol implementation License: OpenSSL Group: Development/Libraries/C and C++ Url: http://libressl.org/ +#Freshcode-Url: http://freshcode.club/projects/libressl #Git-Clone: git://github.com/libressl-portable/portable #See-Also: git://github.com/libressl-portable/openbsd #DL-URL: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ @@ -46,31 +47,31 @@ OpenSSL, with the aim of refactoring the OpenSSL code so as to provide a more secure implementation. -%package -n libcrypto42 +%package -n libcrypto43 Summary: An SSL/TLS protocol implementation Group: System/Libraries -%description -n libcrypto42 +%description -n libcrypto43 The "crypto" library implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the LibreSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement SSH, OpenPGP, and other cryptographic standards. -%package -n libssl44 +%package -n libssl45 Summary: An SSL/TLS protocol implementation Group: System/Libraries -%description -n libssl44 +%description -n libssl45 LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL and intends to provide a more secure implementation. -%package -n libtls16 +%package -n libtls17 Summary: A simplified interface for the OpenSSL/LibreSSL TLS protocol implementation Group: System/Libraries -%description -n libtls16 +%description -n libtls17 LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL and intends to provide a more secure implementation. @@ -81,9 +82,9 @@ %package devel Summary: Development files for LibreSSL, an SSL/TLS protocol implementation Group: Development/Libraries/C and C++ -Requires: libcrypto42 = %version -Requires: libssl44 = %version -Requires: libtls16 = %version +Requires: libcrypto43 = %version +Requires: libssl45 = %version +Requires: libtls17 = %version Conflicts: libopenssl-devel Conflicts: otherproviders(ssl-devel) @@ -141,12 +142,12 @@ exit 1 fi -%post -n libcrypto42 -p /sbin/ldconfig -%postun -n libcrypto42 -p /sbin/ldconfig -%post -n libssl44 -p /sbin/ldconfig -%postun -n libssl44 -p /sbin/ldconfig -%post -n libtls16 -p /sbin/ldconfig -%postun -n libtls16 -p /sbin/ldconfig +%post -n libcrypto43 -p /sbin/ldconfig +%postun -n libcrypto43 -p /sbin/ldconfig +%post -n libssl45 -p /sbin/ldconfig +%postun -n libssl45 -p /sbin/ldconfig +%post -n libtls17 -p /sbin/ldconfig +%postun -n libtls17 -p /sbin/ldconfig %files %defattr(-,root,root) @@ -159,15 +160,15 @@ %_mandir/man5/*.5* %doc COPYING -%files -n libcrypto42 +%files -n libcrypto43 %defattr(-,root,root) %_libdir/libcrypto.so.* -%files -n libssl44 +%files -n libssl45 %defattr(-,root,root) %_libdir/libssl.so.* -%files -n libtls16 +%files -n libtls17 %defattr(-,root,root) %_libdir/libtls.so.* ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.noqox3/_old 2018-03-28 10:31:14.233356755 +0200 +++ /var/tmp/diff_new_pack.noqox3/_new 2018-03-28 10:31:14.237356611 +0200 @@ -1,9 +1,9 @@ -libcrypto42 -libssl44 -libtls16 +libcrypto43 +libssl45 +libtls17 libressl-devel requires -libressl-<targettype> - requires "libcrypto42-<targettype> = <version>" - requires "libssl44-<targettype> = <version>" - requires "libtls16-<targettype> = <version>" + requires "libcrypto43-<targettype> = <version>" + requires "libssl45-<targettype> = <version>" + requires "libtls17-<targettype> = <version>" conflicts "libopenssl-devel-<targettype>" ++++++ libressl-2.6.4.tar.gz -> libressl-2.7.1.tar.gz ++++++ ++++ 49794 lines of diff (skipped)
