osslsigncode-2.7-1.1 RPM for riscv64

From OpenSuSE Ports Tumbleweed for riscv64

osslsigncode is a small utility for placing signatures on Microsoft cabinate
files and executables.

Provides

• osslsigncode
• osslsigncode(riscv-64)

Requires

• ld-linux-riscv64-lp64d.so.1()(64bit)
• ld-linux-riscv64-lp64d.so.1(GLIBC_2.27)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcurl.so.4()(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

GPL-3.0-only

Changelog

* Wed Dec 20 2023 Radoslav Kolev <radoslav.kolev@suse.com>
  - update to 2.7.0
    * fixed signing CAB files (by Michael Brown)
    * fixed handling of unsupported commands (by Maxim Bagryantsev)
    * fixed writing DIFAT sectors
    * added APPX support (by Maciej Panek and Małgorzata Olszówka)
    * added a built-in TSA response generation (-TSA-certs, -TSA-key
      and -TSA-time options)
    * added verification of CRLs specified in the signing certificate
    * added MSI DIFAT sectors support (by Max Bagryantsev)
    * added the "-h" option to set the cryptographic hash function for the
      "attach -signature" and "add" commands
    * set the default hash function to "sha256"
    * added the "attach-signature" option to compute and compare the leaf
      certificate hash for the "add" command
    * renamed the "-st" option "-time"
    * updated the "-time" option to also set explicit verification time
    * added the "-ignore-timestamp" option
    * removed the "-timestamp-expiration" option
    * numerous bugfixes
    * documentation updates
  - build system changed to cmake
  - use source code tag instead of release artifact for source
  - updated URL
  - removed gpg check, signature no longer available from upstream
* Sun Apr 10 2022 Dirk Müller <dmueller@suse.com>
  - update to 2.3.0:
    * This release fixes several critical memory corruption vulnerabilities.
      A malicious attacker could create a file, which, when processed with
      osslsigncode, triggers arbitrary code execution. Any previous version
      of osslsigncode should be immediately upgraded if the tool is used for
      processing of untrusted files.
    * fixed non-interactive PVK (MSBLOB) key decryption
    * added a bash completion script
    * added CA bundle path auto-detection
    * CAT files support (thanks to James McKenzie)
    * MSI support rewritten without libgsf dependency, which allows
    * for handling of all the needed MSI metadata, such as dates
    * "-untrusted" option renamed to "-TSA-CAfile"
    * "-CRLuntrusted" option renamed to "-TSA-CRLfile"
    * numerous bug fixes and improvements
    * certificate chain verification support
    * timestamp verification support
    * CRL verification support ("-CRLfile" option)
    * improved CAB signature support
    * nested signatures support
    * user-specified signing time ("-st" option) by vszakats
    * added more tests
    * fixed numerous bugs
    * dropped OpenSSL 1.1.0 support
    * orphaned project adopted by Michał Trojnara
    * ported to OpenSSL 1.1.x
    * ported to SoftHSM2
    * add support for pkcs11-based hardware tokens
    * improved error reporting of timestamping errors
  - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete)
  - add gpg validation
* Mon Nov 12 2018 meissner@suse.com
  - license is now GPL 3.0
* Wed Oct 24 2018 Cristian Rodríguez <crrodriguez@opensuse.org>
  - 0001-Make-code-work-with-OpenSSL-1.1.patch: Build against
    openssl 1.1.
* Wed Dec 20 2017 fcrozat@suse.com
  - Adapt BuildRequires to libopenssl-1_0_0-devel for SLE15 / TW.
* Mon Oct 05 2015 idonmez@suse.com
  - Add libgsf-devel dependency to enable MSI support.
* Sun Mar 08 2015 p.drouand@gmail.com
  - Update to version 1.7.1
    * MSI: added -add-msi-dse option
    * MSI: fix build when GSF_CAN_READ_MSI_METADATA defined
  - Add autoconf, automake and pkg-config BuildRequire; new dependencies
  - Move to pkg-config depend style
* Wed Jan 23 2013 fcrozat@suse.com
  - Initial package for openSUSE (based on James Bottomley package).

Files

/usr/bin/osslsigncode
/usr/share/bash-completion/completions/osslsigncode.bash
/usr/share/licenses/osslsigncode
/usr/share/licenses/osslsigncode/COPYING.txt
/usr/share/licenses/osslsigncode/LICENSE.txt

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Nov 19 01:14:14 2024