| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: osslsigncode | Distribution: openSUSE Leap 16.0 |
| Version: 2.7 | Vendor: openSUSE |
| Release: lp160.1.1 | Build date: Wed Dec 20 10:35:53 2023 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 238957 | Source RPM: osslsigncode-2.7-lp160.1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/mtrojnar/osslsigncode | |
| Summary: Platform-independent tool for Authenticode signing of EXE/CAB files | |
osslsigncode is a small utility for placing signatures on Microsoft cabinate files and executables.
GPL-3.0-only
* Wed Dec 20 2023 Radoslav Kolev <radoslav.kolev@suse.com>
- update to 2.7.0
* fixed signing CAB files (by Michael Brown)
* fixed handling of unsupported commands (by Maxim Bagryantsev)
* fixed writing DIFAT sectors
* added APPX support (by Maciej Panek and Małgorzata Olszówka)
* added a built-in TSA response generation (-TSA-certs, -TSA-key
and -TSA-time options)
* added verification of CRLs specified in the signing certificate
* added MSI DIFAT sectors support (by Max Bagryantsev)
* added the "-h" option to set the cryptographic hash function for the
"attach -signature" and "add" commands
* set the default hash function to "sha256"
* added the "attach-signature" option to compute and compare the leaf
certificate hash for the "add" command
* renamed the "-st" option "-time"
* updated the "-time" option to also set explicit verification time
* added the "-ignore-timestamp" option
* removed the "-timestamp-expiration" option
* numerous bugfixes
* documentation updates
- build system changed to cmake
- use source code tag instead of release artifact for source
- updated URL
- removed gpg check, signature no longer available from upstream
* Sun Apr 10 2022 Dirk Müller <dmueller@suse.com>
- update to 2.3.0:
* This release fixes several critical memory corruption vulnerabilities.
A malicious attacker could create a file, which, when processed with
osslsigncode, triggers arbitrary code execution. Any previous version
of osslsigncode should be immediately upgraded if the tool is used for
processing of untrusted files.
* fixed non-interactive PVK (MSBLOB) key decryption
* added a bash completion script
* added CA bundle path auto-detection
* CAT files support (thanks to James McKenzie)
* MSI support rewritten without libgsf dependency, which allows
* for handling of all the needed MSI metadata, such as dates
* "-untrusted" option renamed to "-TSA-CAfile"
* "-CRLuntrusted" option renamed to "-TSA-CRLfile"
* numerous bug fixes and improvements
* certificate chain verification support
* timestamp verification support
* CRL verification support ("-CRLfile" option)
* improved CAB signature support
* nested signatures support
* user-specified signing time ("-st" option) by vszakats
* added more tests
* fixed numerous bugs
* dropped OpenSSL 1.1.0 support
* orphaned project adopted by Michał Trojnara
* ported to OpenSSL 1.1.x
* ported to SoftHSM2
* add support for pkcs11-based hardware tokens
* improved error reporting of timestamping errors
- drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete)
- add gpg validation
* Mon Nov 12 2018 meissner@suse.com
- license is now GPL 3.0
* Wed Oct 24 2018 Cristian Rodríguez <crrodriguez@opensuse.org>
- 0001-Make-code-work-with-OpenSSL-1.1.patch: Build against
openssl 1.1.
* Wed Dec 20 2017 fcrozat@suse.com
- Adapt BuildRequires to libopenssl-1_0_0-devel for SLE15 / TW.
* Mon Oct 05 2015 idonmez@suse.com
- Add libgsf-devel dependency to enable MSI support.
* Sun Mar 08 2015 p.drouand@gmail.com
- Update to version 1.7.1
* MSI: added -add-msi-dse option
* MSI: fix build when GSF_CAN_READ_MSI_METADATA defined
- Add autoconf, automake and pkg-config BuildRequire; new dependencies
- Move to pkg-config depend style
* Wed Jan 23 2013 fcrozat@suse.com
- Initial package for openSUSE (based on James Bottomley package).
/usr/bin/osslsigncode /usr/share/bash-completion/completions/osslsigncode.bash /usr/share/licenses/osslsigncode /usr/share/licenses/osslsigncode/COPYING.txt /usr/share/licenses/osslsigncode/LICENSE.txt
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Nov 12 00:13:41 2024