Hello community, here is the log from the commit of package libressl for openSUSE:Factory checked in at 2018-08-10 09:49:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libressl (Old) and /work/SRC/openSUSE:Factory/.libressl.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libressl" Fri Aug 10 09:49:17 2018 rev:40 rq:628117 version:2.8.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libressl/libressl.changes 2018-05-07 14:54:03.469329165 +0200 +++ /work/SRC/openSUSE:Factory/.libressl.new/libressl.changes 2018-08-10 09:49:19.014225367 +0200 @@ -1,0 +2,32 @@ +Wed Aug 8 13:26:31 UTC 2018 - [email protected] + +- Update to new upstream release 2.8.0 + * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry. + * Tighten up checks for various X509_VERIFY_PARAM functions, + 'poisoning' parameters so that an unverified certificate + cannot be used if it fails verification. + * Fixed a potential memory leak on failure in ASN1_item_digest. + * Fixed a potential memory alignment crash in + asn1_item_combine_free. + * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and + SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO + paths. + * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds. + * Added const annotations to many existing APIs from OpenSSL, + making interoperability easier for downstream applications. + * Added a missing bounds check in c2i_ASN1_BIT_STRING. + * Removed three remaining single DES cipher suites. + * Fixed a potential leak/incorrect return value in DSA + signature generation. + * Added a blinding value when generating DSA and ECDSA + signatures, in order to reduce the possibility of a + side-channel attack leaking the private key. + * Added ECC constant time scalar multiplication support. + * Revised the implementation of RSASSA-PKCS1-v1_5 to match the + specification in RFC 8017. + * Changes from 2.7.4: + * Avoid a timing side-channel leak when generating DSA and ECDSA + signatures. + * Reject excessively large primes in DH key generation. + +------------------------------------------------------------------- Old: ---- libressl-2.7.3.tar.gz libressl-2.7.3.tar.gz.asc New: ---- libressl-2.8.0.tar.gz libressl-2.8.0.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libressl.spec ++++++ --- /var/tmp/diff_new_pack.xYiSop/_old 2018-08-10 09:49:19.934226849 +0200 +++ /var/tmp/diff_new_pack.xYiSop/_new 2018-08-10 09:49:19.938226856 +0200 @@ -17,7 +17,7 @@ Name: libressl -Version: 2.7.3 +Version: 2.8.0 Release: 0 Summary: An SSL/TLS protocol implementation License: OpenSSL ++++++ libressl-2.7.3.tar.gz -> libressl-2.8.0.tar.gz ++++++ ++++ 29188 lines of diff (skipped)
