Hello community, here is the log from the commit of package tpm2.0-tools for openSUSE:Factory checked in at 2017-06-04 02:00:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tpm2.0-tools (Old) and /work/SRC/openSUSE:Factory/.tpm2.0-tools.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tpm2.0-tools" Sun Jun 4 02:00:01 2017 rev:4 rq:500551 version:2.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tpm2.0-tools/tpm2.0-tools.changes 2017-03-12 20:02:40.848956948 +0100 +++ /work/SRC/openSUSE:Factory/.tpm2.0-tools.new/tpm2.0-tools.changes 2017-06-04 02:00:03.658235830 +0200 @@ -1,0 +2,22 @@ +Fri Jun 2 07:16:45 UTC 2017 - meiss...@suse.com + +- tpm2.0-tools-fix-hardening.patch: do not disable fortify, + do not use -Wstack-protector as it warns also for non-utilized + functions and then -Werror fails. +- tpm2.0-tools-fix-gcc7.patch: fixed gcc7 case fallthrough errors + +------------------------------------------------------------------- +Wed May 10 11:52:40 UTC 2017 - matthias.gerst...@suse.com + +- Major update to 2.0.0 + - dropped fixes.patch, now part of the upstream version + - a set of man pages have been added to the package + - Upstream changes: + * Tracked on the milestone: https://github.com/01org/tpm2.0-tools/milestone/2 + * Reworked all the tools to support configurable TCTIs, based on build time + configuration, one can specify the tcti via the --tcti (-T) option to all + tools. + * tpm2_getrandom interface made -s a positional argument. + * Numerous bug fixes. + +------------------------------------------------------------------- Old: ---- fixes.patch v1.1.0.zip New: ---- 2.0.0.zip tpm2.0-tools-fix-gcc7.patch tpm2.0-tools-fix-hardening.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tpm2.0-tools.spec ++++++ --- /var/tmp/diff_new_pack.gcJO9A/_old 2017-06-04 02:00:04.398131396 +0200 +++ /var/tmp/diff_new_pack.gcJO9A/_new 2017-06-04 02:00:04.398131396 +0200 @@ -17,14 +17,15 @@ Name: tpm2.0-tools -Version: 1.1.0 +Version: 2.0.0 Release: 0 Summary: Trusted Platform Module (TPM) 2.0 administration tools License: BSD-3-Clause Group: Productivity/Security Url: https://github.com/01org/tpm2.0-tools -Source0: https://github.com/01org/tpm2.0-tools/archive/v%{version}.zip -Patch0: fixes.patch +Source0: https://github.com/01org/tpm2.0-tools/archive/%{version}.zip +Patch0: tpm2.0-tools-fix-hardening.patch +Patch1: tpm2.0-tools-fix-gcc7.patch BuildRequires: autoconf-archive BuildRequires: automake BuildRequires: gcc-c++ @@ -46,6 +47,7 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 %build bash ./bootstrap @@ -63,5 +65,6 @@ %defattr(-,root,root) %doc README.md manual LICENSE /usr/sbin/tpm2_* +%{_mandir}/man8/tpm2_* %changelog ++++++ tpm2.0-tools-fix-gcc7.patch ++++++ Index: tpm2.0-tools-2.0.0/tools/main.c =================================================================== --- tpm2.0-tools-2.0.0.orig/tools/main.c +++ tpm2.0-tools-2.0.0/tools/main.c @@ -61,7 +61,7 @@ main (int argc, execute_man (argv[0], envp); fprintf (stderr, "failed to load manpage, check your environment / PATH\n"); - /* no break */ + /* FALLTHROUGH */ case 2: exit (1); } Index: tpm2.0-tools-2.0.0/tools/tpm2_dump_capability.c =================================================================== --- tpm2.0-tools-2.0.0.orig/tools/tpm2_dump_capability.c +++ tpm2.0-tools-2.0.0/tools/tpm2_dump_capability.c @@ -595,7 +595,7 @@ dump_tpm_capability (TPMU_CAPABILITIES case TPM_CAP_COMMANDS: dump_command_attr_array (capabilities->command.commandAttributes, capabilities->command.count); - /* no break */ + /* FALLTHROUGH */ default: return 1; } ++++++ tpm2.0-tools-fix-hardening.patch ++++++ --- tpm2.0-tools-2.0.0/configure.ac.fix 2017-06-02 09:15:49.118425187 +0200 +++ tpm2.0-tools-2.0.0/configure.ac 2017-06-02 09:15:59.698416673 +0200 @@ -100,11 +100,9 @@ add_hardened_c_flag([-Wformat]) add_hardened_c_flag([-Wformat-security]) - add_hardened_c_flag([-Wstack-protector]) add_hardened_c_flag([-fstack-protector-all]) add_hardened_define_flag([-D_FORTIFY_SOURCE=2]) - add_hardened_define_flag([-U_FORTIFY_SOURCE]) add_hardened_c_flag([-fPIC]) add_hardened_ld_flag([[-shared]])
