Hello community, here is the log from the commit of package libsodium for openSUSE:Factory checked in at 2017-10-01 16:59:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsodium (Old) and /work/SRC/openSUSE:Factory/.libsodium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libsodium" Sun Oct 1 16:59:58 2017 rev:20 rq:529173 version:1.0.14 Changes: -------- --- /work/SRC/openSUSE:Factory/libsodium/libsodium.changes 2017-03-20 17:13:36.967530552 +0100 +++ /work/SRC/openSUSE:Factory/.libsodium.new/libsodium.changes 2017-10-01 17:00:01.817769925 +0200 @@ -1,0 +2,51 @@ +Thu Sep 28 19:54:43 UTC 2017 - idonmez@suse.com + +- Update to version 1.0.14 + * Internal consistency checks failing and primitives used with + dangerous/out-of-bounds/invalid parameters used to call abort(3). + Now, a custom handler that doesn't return can be set with the + set_sodium_misuse() function. It still aborts by default or if + the handler ever returns. This is not a replacement for non-fatal, + expected runtime errors. This handler will be only called in + unexpected situations due to potential bugs in the library or in + language bindings. + * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max() + symbols) have been added to represent the maximum message size that + can be safely handled by a primitive. Language bindings are + encouraged to check user inputs against these maximum lengths. + * The test suite has been extended to cover more edge cases. + * crypto_sign_ed25519_pk_to_curve25519() now rejects points that + are not on the curve, or not in the main subgroup. + * Further changes have been made to ensure that smart compilers + will not optimize out code that we don't want to be optimized. + * The sodium_runtime_has_* symbols for CPU features detection are + now defined as weak symbols, i.e. they can be replaced with an + application-defined implementation. This can be useful to + disable AVX* when temperature/power consumption is a concern. + * crypto_kx_*() now aborts if called with no non-NULL pointers + to store keys to. + * SSE2 implementations of crypto_verify_*() have been added. + * Passwords can be hashed using a specific algorithm with the new + crypto_pwhash_str_alg() function. + * Due to popular demand, base64 encoding (sodium_bin2base64()) + and decoding (sodium_base642bin()) have been implemented. + * A new crypto_secretstream_*() API was added to safely encrypt + files and multi-part messages. + * The sodium_pad() and sodium_unpad() helper functions have been + added in order to add & remove padding. + * An AVX512 optimized implementation of Argon2 has been added. + * The crypto_pwhash_str_needs_rehash() function was added to check + if a password hash string matches the given parameters, or if it + needs an update. + + Updates from 1.0.13 + * An AVX2 optimized implementation of the Argon2 round function was added. + * The Argon2id variant of Argon2 has been implemented. The high-level + crypto_pwhash_str_verify() function automatically detects the + algorithm and can verify both Argon2i and Argon2id hashed passwords. + The default algorithm for newly hashed passwords remains Argon2i + in this version to avoid breaking compatibility with verifiers + running libsodium <= 1.0.12. + * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented. + +------------------------------------------------------------------- Old: ---- libsodium-1.0.12.tar.gz New: ---- libsodium-1.0.14.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsodium.spec ++++++ --- /var/tmp/diff_new_pack.TfgEmO/_old 2017-10-01 17:00:03.305560624 +0200 +++ /var/tmp/diff_new_pack.TfgEmO/_new 2017-10-01 17:00:03.309560061 +0200 @@ -18,7 +18,7 @@ %define lname libsodium18 Name: libsodium -Version: 1.0.12 +Version: 1.0.14 Release: 0 Summary: Portable NaCl-based crypto library License: ISC @@ -62,12 +62,12 @@ %build -%if 0%{?suse_version} > 1320 -%ifarch %{ix86} x86_64 -export CFLAGS="%{optflags} -flto" -export LDFLAGS="-flto" -%endif -%endif +#%if 0%{?suse_version} > 1320 +#%ifarch %{ix86} x86_64 +#export CFLAGS="%{optflags} -flto" +#export LDFLAGS="-flto" +#%endif +#%endif %configure --disable-static make %{?_smp_mflags} V=1 ++++++ libsodium-1.0.12.tar.gz -> libsodium-1.0.14.tar.gz ++++++ ++++ 28629 lines of diff (skipped)