File libnettle.changes of Package libnettle

Overview Repositories Revisions Requests Users Attributes Meta

File libnettle.changes of Package libnettle

-------------------------------------------------------------------
Thu Jun 10 15:35:47 UTC 2021 - Pedro Monreal <pmonreal@suse.com>

- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
  * Add libnettle-CVE-2021-3580.patch

-------------------------------------------------------------------
Mon Apr 19 12:35:57 UTC 2021 - Pedro Monreal <pmonreal@suse.com>

- Security fix: [bsc#1184401, bsc#1183835, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch

-------------------------------------------------------------------
Wed May 31 14:19:20 UTC 2017 - pmonrealgonzalez@suse.com

- Added patch to fix bsc#991464 CVE-2016-6489:
  * nettle-CVE-2016-6489.patch
  * Reject invalid RSA keys with even modulo.
  * Check for invalid keys, with even p, in dsa_sign().
  * Use function mpz_powm_sec() instead of mpz_powm().

-------------------------------------------------------------------
Wed Feb  3 09:02:49 UTC 2016 - tchvatal@suse.com

- Add patch to fix bnc#964849 CVE-2015-8805 and bnc#964845 CVE-2015-8803:
  * CVE-2015-8805.patch
- Add patch to fix bnc#964847 CVE-2015-8804:
  * CVE-2015-8804.patch

-------------------------------------------------------------------
Tue May 13 13:35:51 UTC 2014 - tchvatal@suse.com

- Cleanup with spec-cleaner
- Paralelize test run

-------------------------------------------------------------------
Thu Dec 19 12:58:12 UTC 2013 - meissner@suse.com

- also build baselibs for libnettle-devel (for wine 32bit development)

-------------------------------------------------------------------
Tue Jun 25 14:15:48 UTC 2013 - meissner@suse.com

- Update to version 2.7.1
  * Fixed ecc_modp_mul call, to avoid invalid overlap of arguments to
    mpn_mul_n. Problem tracked down by Magnus Holmgren.
  * ARM fixes.
- reference gpg signatures and keyring. checking not enabled as to
  avoid cycles.

-------------------------------------------------------------------
Thu May 16 11:39:47 UTC 2013 - idonmez@suse.com

- Update to version 2.7
  * Support for the GOST R 34.11-94 hash algorithm
  * Support for SHA3
  * Support for PKCS #5 PBKDF2
  * Fixed a small memory leak in nettle_realloc and
    nettle_xrealloc.
  * x86_64 assembly for SHA256, SHA512, and SHA3
  * ARM assembly code for several additional algorithms,
    including AES, Salsa20, and the SHA family of hash
    functions.
  * Support for 12-round salsa20, "salsa20r12", as specified by
    eSTREAM.
  * Support for UMAC, including x86_64 and ARM assembly.
  * Support for ECDSA signatures. Elliptic curve operations over
    the following curves: secp192r1, secp224r1, secp256r1,
    secp384r1 and secp521r1, including x86_64 and ARM assembly
    for the most important primitives.
- Depend on makeinfo for info file generation.
- Don't disable static libs, they are needed at build time.

-------------------------------------------------------------------
Sun Nov 25 14:54:46 UTC 2012 - andreas.stieger@gmx.de

- upgrade to 2.5:
  * removed some internal undocumented functions
  * pkcs1_signature_prefix renamed to _pkcs1_signature_prefix
    with slightly different behavior
  * nettle-internal.c is no longer included
  * Support for the salsa20 block cipher
  * Tentative interface for timing-resistant RSA functions
  * A more general interface for PKCS#1 signatures
  * Documentation, example programs for the base16 and base64
  * Use an additional table to avoid GF2^8 multiplications in
    aes_invert_key (mainly used by aes_set_decrypt_key). Also
    tabulate round constants in aes_set_encrypt_key.
- configure --enable-shared now default, no longer required

-------------------------------------------------------------------
Tue Jan 31 12:24:52 UTC 2012 - jengelh@medozas.de

- Remove redundant tags/sections per specfile guideline suggestions

-------------------------------------------------------------------
Sat Sep 24 15:58:07 UTC 2011 - crrodriguez@opensuse.org

- BuildRequire pkgconfig to fix rpmlint warning

-------------------------------------------------------------------
Mon Sep 19 19:04:36 UTC 2011 - crrodriguez@opensuse.org

- Update to version 2.4 only two important changes
* ripemd160 was broken on all big endian machines
* add pkgconfig files

-------------------------------------------------------------------
Mon Aug 29 08:51:59 UTC 2011 - coolo@novell.com

- use original source
- add baselibs.conf
- drop licenses

-------------------------------------------------------------------
Wed Aug 17 17:52:58 UTC 2011 - crrodriguez@opensuse.org

- Fix licenses [bnc#712616]
- run make check

-------------------------------------------------------------------
Tue Aug 16 01:31:39 UTC 2011 - crrodriguez@opensuse.org

- Update to version 2.2, bump sonames accordingly
- Fix build in factory
- Fix -devel package dependencies
- Tune up spec file in order to submit package to factory
  as is needed for gnutls version 3.x

-------------------------------------------------------------------
Tue Jan  5 22:31:53 UTC 2010 - pascal.bleser@opensuse.org

- initial package (2.0)

Places

File libnettle.changes of Package libnettle

Places