baserev update by copy to link target

• Files Changed
• Browse Source

- Add missing requires for certtool

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 0.8.1:
  - swtpm:
    -   Restore logging to stderr on log open failure
  - swtpm_setup:
    -   Exit with '0' upon --version rather than '1'.
    -   Initialized @argv in get_swtpm_capabilities()
  - swtpm_localca:
    -   Add missing NULL option to end of array
  - SELinux:
    -   Add rules for user_tpm_t:sockfile to allow unlink
    -   Add rules for sock_file on user_tmp_t

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Make selinux optional to allow building this package for Leap, too.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- remove python3 dependency, no longer needed after rewrite (bsc#1211010)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

  bsc#1209117

• Files Changed
• Browse Source

- swtpm-fix-build.patch: disable -Wstack-protector, it fails on s390x

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

    + Check header size indicator against expected size (CVE-2022-23645 bsc#1196240)

• Files Changed
• Browse Source

- Drop trousers requirement

- Update to version 0.8.0:
  * swtpm:
    + Implement release-lock-outgoing parameter for --migration option
    + Introduce --migration option and 'incoming' parameter
    + Implement terminate parameter for ctrl channel loss
    + Add a chroot option
    + Introduce disable-auto-shutdown flag for --flags option
    + If necessary send TPM2_Shutdown() before TPMLIB_Terminate()
    + Add some more recent syscalls to seccomp profile
    + Disable OpenSSL FIPS mode to avoid libtpms failures
    + Avoid locking directory multiple times
    + Remove support for pre-v0.1 state files without header
    + Use uint64_t in tlv_data_append() to avoid integer overflows
    + Use uint64_t to avoid integer wrap-around when adding a uint32_t
    + Do not chdir(/) when using --daemon
    + Check header size indicator against expected size (CVE-2022-23645)
    + Fixes for gcc 12.2.1 -fanalyzer
  * build-sys:
    + Fix configure script to support _FORTIFY_SOURCE=3
    + Define __USE_LINUX_IOCTL_DEFS in header file (Cygwin)
  * swtpm-localca:
    + Re-implement variable resolution for swtpm-localca.conf
    + Test for available issuercert before creating CA
  * swtpm_setup:
    + Configure swtpm to log to stdout/err if needed (glib >=2.74)
  * tests:
    + Use ${WORKDIR} in config files to test env. var replacement
    + Patch IBM TSS2 test suite for OpenSSL 3.x

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Updated to version 0.7.3:
  - swtpm:
    - Use uint64_t in tlv_data_append() to avoid integer overflows
    - Use uint64_t to avoid integer wrap-around when adding a uint32_t
- removed allow-FORTIFY_SOURCE=3.patch (upstreamed)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Cheery-pick upstream patch allow-FORTIFY_SOURCE=3.patch.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 0.7.2:
  - swtpm:
    - Do not chdir(/) when using --daemon
  - swtpm-localca:
    - Re-implement variable resolution for swtpm-localca.conf
  - tests:
    - Use ${WORKDIR} in config files to test env. var replacement
  - man pages:
    - Add missing .config directory to path description when using ${HOME}
  - build-sys:
    - Add probing for -fstack-protector

• Files Changed
• Browse Source