Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mokutil for openSUSE:Factory checked in at 2021-07-17 23:36:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mokutil (Old) and /work/SRC/openSUSE:Factory/.mokutil.new.2632 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mokutil" Sat Jul 17 23:36:25 2021 rev:27 rq:906401 version:0.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mokutil/mokutil.changes 2021-05-07 16:44:51.376478440 +0200 +++ /work/SRC/openSUSE:Factory/.mokutil.new.2632/mokutil.changes 2021-07-17 23:36:45.269916179 +0200 @@ -1,0 +2,56 @@ +Thu Jul 15 06:39:26 UTC 2021 - Gary Ching-Pang Lin <g...@suse.com> + +- Update to 0.5.0 + + mokutil: delete key/hash from the reverse request + + efi_x509: fix an error handling in is_immediate_ca() + + efi_x509: fix certificates fingerprint calculation + + efi_x509: use EVP_Digest()* functions instead of the deprecated + SHA1_*() + + src/util.c: fix NULL pointer dereference in mok_get_variable + + mokutil: Read the SbatLevelRT variable to get the SBAT entries + + mokutil: add mok-variables parsing support + + mokutil: Add option to print the UEFI SBAT variable content + + mokutil: only check for Secure Boot support in options that + need it + + efi_x509: add the function to fetch SKID + + keyring: add the function to check kernel keyring + + mokutil: initialize data for efi_get_variable() + + mokutil: correct the data for efi_set_variable() in + set_password() + + mokutil: improve the readability of issue_mok_request() + + mokutil: drop the checks for PK and KEK + + mokutil: check the blocklists before enrolling a key + + mokutil: adjust the command bits + + mokutil: remove "--simple-hash" + + make CA check non-fatal + + mokutil: close file in the error path + + mokutil: do the CA check + + efi_x509: add the function to check immediate CA + + efi_x509: use d2i_X509() to create X509 handling + + mokutil: rename hash_file as pw_hash_file + + password-crypt: update the function names + + password-crypt: fix the types of several functions + + mokutil: fix the error message in sb_state() + + mokutil: move x509 functions to efi_x509.c + + mokutil: move the hash functions to efi_hash.c + + util: add functions for db_var_name and db_friendly_name + + Remove the SHA1 code from identify_hash_type() + + Map the UEFI variable names with a function + + Fix -Wcast-align warnings + + Fix 32 bit build + + Add --timeout to manpage and other corrections. + + mokutil.c: fix typo enrollement -> enrollment + + Avoid taking pointer to packed struct + + Fix name of --enable-validation in the description + + Remove shebang from bash-completion/mokutil +- Add mokutil-fix-missing-header.patch to fix the compilation error + due to the missing header +- Refresh mokutil-remove-libkeyutils-check.patch and only apply + it to openSUSE Leap 15.* +- Drop upstreamed patches: + + mokutil-remove-shebang-from-bash-completion-file.patch + + mokutil-bsc1173115-add-ca-and-keyring-checks.patch +- Drop mokutil-support-revoke-builtin-cert.patch since we don't use + the builtin cert prompt patch in shim anymore. + +------------------------------------------------------------------- Old: ---- 0.4.0.tar.gz mokutil-bsc1173115-add-ca-and-keyring-checks.patch mokutil-remove-shebang-from-bash-completion-file.patch mokutil-support-revoke-builtin-cert.patch New: ---- 0.5.0.tar.gz mokutil-fix-missing-header.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mokutil.spec ++++++ --- /var/tmp/diff_new_pack.qYRI4A/_old 2021-07-17 23:36:45.805912047 +0200 +++ /var/tmp/diff_new_pack.qYRI4A/_new 2021-07-17 23:36:45.809912016 +0200 @@ -17,7 +17,7 @@ Name: mokutil -Version: 0.4.0 +Version: 0.5.0 Release: 0 Summary: Tools for manipulating machine owner keys License: GPL-3.0-only @@ -25,13 +25,10 @@ URL: https://github.com/lcp/mokutil Source: https://github.com/lcp/%{name}/archive/%{version}.tar.gz Source1: modhash -# PATCH-FIX-UPSTREAM mokutil-remove-shebang-from-bash-completion-file.patch g...@suse.com -- Remove shebang from bash-completion/mokutil -Patch1: mokutil-remove-shebang-from-bash-completion-file.patch -# PATCH-FIX-UPSTREAM mokutil-bsc1173115-add-ca-and-keyring-checks.patch bsc#1173115 g...@suse.com -- Add options for CA and kernel keyring checks -Patch2: mokutil-bsc1173115-add-ca-and-keyring-checks.patch # PATCH-FIX-SUSE mokutil-remove-libkeyutils-check.patch g...@suse.com -- Disable the check of libkeyutils version -Patch3: mokutil-remove-libkeyutils-check.patch -Patch100: mokutil-support-revoke-builtin-cert.patch +Patch1: mokutil-remove-libkeyutils-check.patch +# PATCH-FIX-UPSTREAM mokutil-fix-missing-header.patch g...@suse.com -- Fix the compilation error due to the missing header +Patch2: mokutil-fix-missing-header.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: efivar-devel >= 0.12 @@ -47,10 +44,10 @@ %prep %setup -q +%if 0%{?suse_version} <= 1500 %patch1 -p1 +%endif %patch2 -p1 -%patch3 -p1 -%patch100 -p1 %build ./autogen.sh ++++++ 0.4.0.tar.gz -> 0.5.0.tar.gz ++++++ ++++ 3684 lines of diff (skipped) ++++++ mokutil-fix-missing-header.patch ++++++ >From b15e7c4d7a99f82edb68de1177198b17972682da Mon Sep 17 00:00:00 2001 From: Gary Lin <g...@suse.com> Date: Thu, 15 Jul 2021 14:41:56 +0800 Subject: [PATCH] util: add the missing stdio.h The header, stdio.h, was missing when moving functions to util.c and some compiler would complain implicit declaration. Signed-off-by: Gary Lin <g...@suse.com> --- src/util.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/util.c b/src/util.c index d875144..621869f 100644 --- a/src/util.c +++ b/src/util.c @@ -29,6 +29,7 @@ * files in the program, then also delete it here. */ +#include <stdio.h> #include <stdlib.h> #include <termios.h> -- 2.31.1 ++++++ mokutil-remove-libkeyutils-check.patch ++++++ --- /var/tmp/diff_new_pack.qYRI4A/_old 2021-07-17 23:36:45.893911369 +0200 +++ /var/tmp/diff_new_pack.qYRI4A/_new 2021-07-17 23:36:45.897911338 +0200 @@ -11,10 +11,10 @@ src/Makefile.am | 3 +-- 2 files changed, 1 insertion(+), 3 deletions(-) -diff --git a/configure.ac b/configure.ac -index b0b0376..d74fd21 100644 ---- a/configure.ac -+++ b/configure.ac +Index: mokutil-0.5.0/configure.ac +=================================================================== +--- mokutil-0.5.0.orig/configure.ac ++++ mokutil-0.5.0/configure.ac @@ -85,7 +85,6 @@ AC_CHECK_FUNCS([memset]) PKG_CHECK_MODULES(OPENSSL, [openssl >= 0.9.8]) @@ -23,16 +23,17 @@ AC_ARG_WITH([bash-completion-dir], AS_HELP_STRING([--with-bash-completion-dir[=PATH]], -diff --git a/src/Makefile.am b/src/Makefile.am -index f616b90..664b80a 100644 ---- a/src/Makefile.am -+++ b/src/Makefile.am -@@ -2,12 +2,11 @@ bin_PROGRAMS = mokutil +Index: mokutil-0.5.0/src/Makefile.am +=================================================================== +--- mokutil-0.5.0.orig/src/Makefile.am ++++ mokutil-0.5.0/src/Makefile.am +@@ -2,13 +2,12 @@ bin_PROGRAMS = mokutil mokutil_CFLAGS = $(OPENSSL_CFLAGS) \ $(EFIVAR_CFLAGS) \ - $(LIBKEYUTILS_CFLAGS) \ - $(WARNINGFLAGS_C) + $(WARNINGFLAGS_C) \ + -DVERSION="\"$(VERSION)\"" mokutil_LDADD = $(OPENSSL_LIBS) \ $(EFIVAR_LIBS) \ @@ -41,6 +42,3 @@ -lcrypt mokutil_SOURCES = signature.h \ --- -2.28.0 -
