ELBA-2020-5863

ELBA-2020-5863 - pesign bug fix update

Type:	BUG
Severity:	NA
Release Date:	2020-09-29

Description

[0.109-10.0.5]
- Certs update is for both x86_64 and aarch64; Bump version to 0.5

[0.109-10.0.4]
- Update Oracle Linux test certificates [Orabug: 31928052]

[0.109-10.0.3]
- Bump version as 0.3 since fix for 27859953 both for x86_64 and aarch64

[0.109-10.0.2]
- RPM macro fix (Petr Benes)

[0.109-10.0.1]
- updates for Oracle Linux test certificate (Alexey Petrenko)
- update Oracle Linux certificates (Alexey Petrenko)

[- 0.109-10]
- Add support for /etc/pesign/users and /etc/pesign/groups
Resolves: rhbz#1141263

[0.109-9]
- Fix man page errors.
Resolves: rhbz#948850

[0.109-9]
- Build as PIE+RELRO binaries.
Resolves: rhbz#1092542

[0.109-8]
- Include aarch64 in the rpm macro
Related: rhbz#1100042

[0.109-7]
- Add aarch64.
Resolves: rhbz#1100042

[0.109-6]
- Make sure CFLAGS is inherited properly for -fstack-protector-strong.
Resolves: rhbz#1070782

[0.109-5]
- Mass rebuild 2013-12-27

[0.109-4]
- Tweak the signing rules just a bit more.
Related: rhbz1017857

[0.109-3]
- Update to fix a bug coverity found.
Related: rhbz1017857

[0.109-2]
- Fix the pesign macro for RHEL packages.
Related: rhbz1017857

[0.109-1]
- Update to 0.109
Related: rhbz#893260

[0.106-6]
- Don't create a new certificate database when signing on RHEL.

[0.106-5]
- Use --force with sattrs blob from mktemp()
- Error if we get a zero-sized signed file result

[0.106-4]
- Don't require ascii mode for RHEL CA/signer cert import.

[0.106-3]
- More work on the RHEL %pesign macro

[0.106-2]
- Add rhel %pesign macro definitions.

[0.106-1]
- Update to 0.106
- Hopefully fix the segfault dgilmore was seeing.

[0.105-1]
- Various bug fixes.

[0.104-1]
- Make sure alignment is correct on signature list entries
Resolves: rhbz#963361
- Make sure section alignment is correct if we have to extend the file

[0.103-2]
- Conditionalize systemd bits so they don't show up in RHEL 6 builds

[0.103-1]
- One more compiler problem. Let's expect a few more, shall we?

[0.102-1]
- Don't use --std=gnu11 because we have to work on RHEL 6 builders.

[0.101-1]
- Update to 0.101 to fix more 'pesign -E' issues.

[0.100-1]
- Fix insertion of signatures from a file.

[0.99-9]
- Add a patch needed for new shim builds

[0.99-8]
- Get the Fedora signing token name right.

* Fri Oct 19 2012 Peter Jones
- Add coolkey and opensc modules to pki database during %install.

[0.99-7]
- setfacl u:kojibuilder:rw /var/run/pesign/socket
- Fix command line checking in client
- Add client stdin pin reading.

[0.99-6]
- Automatically select daemon as signer when using rpm macros.

[0.99-5]
- Make it work on the -el6 branch as well.

[0.99-4]
- Fix some more bugs found by valgrind and coverity.
- Don't build utils/ ; we're not using them and they're not ready anyway.

[0.99-3]
- Fix daemon startup bug from 0.99-2

[0.99-2]
- Fix various bugs from 0.99-1
- Don't make the database unreadable just yet.

[0.99-1]
- Update to 0.99
- Add documentation for client/server mode.
- Add --pinfd and --pinfile to server mode.

[0.98-1]
- Update to 0.98
- Add client/server mode.

[0.10-5]
- Fix missing section address fixup.

[0.10-4]
- Make macros.pesign even better (and make it work right for i686 packages)

[0.10-3]
- Only sign things on x86_64; all else ignore gracefully.

[0.10-2]
- Make macros.pesign more reliable

[0.10-1]
- Update to 0.10
- Include rpm macros to support easy custom signing of signed packages.

[0.9-1]
- Update to 0.9
- Bug fix from Gary Ching-Pang Lin
- Support NSS Token selection for use with smart cards.

[0.8-1]
- Update to 0.8
- Don't open the db read-write
- Fix permissions on keystore (everybody can sign with test keys)

[0.7-2]
- Include test keys.

[0.7-1]
- Update to 0.7
- Better fix for MS compatibility.

[0.6-1]
- Update to 0.6
- Bug-for-bug compatibility with signtool.exe .

[0.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[0.5-1]
- Rebase to 0.5
- Do more rigorous bounds checking when hashing a new binary.

[0.3-2]
- Rebase to 0.4

[0.3-2]
- Move man page to a more reasonable place.

[0.3-1]
- Update to upstream's 0.3 .

[0.2-4]
- Do not build with smp flags.

[0.2-3]
- Make it build on i686, though it's unclear it'll ever be necessary.

[0.2-2]
- Fix compile problem with f18's compiler.

[0.2-1]
- Fix some rpmlint complaints nirik pointed out
- Add popt-devel build dep

[0.1-1]
- First version of SRPM.

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team