[23.04 FEAT] Upgrade openCryptoki to latest version (3.20.0)

Bug #2003847 reported by bugproxy
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu on IBM z Systems
Fix Released
High
Skipper Bug Screeners
opencryptoki (Ubuntu)
Fix Released
High
Frank Heimes

Bug Description

Please update openCryptoki to the upcoming new version 3.20.

This version will be available in time for lunar at
https://github.com/opencryptoki/opencryptoki/releases

bugproxy (bugproxy)
tags: added: architecture-s39064 bugnameltc-201357 severity-high targetmilestone-inin2304
Changed in ubuntu:
assignee: nobody → Skipper Bug Screeners (skipper-screen-team)
affects: ubuntu → linux (Ubuntu)
Revision history for this message
Frank Heimes (fheimes) wrote :

Sounds great - I'm excited about the v3.20"

affects: linux (Ubuntu) → opencryptoki (Ubuntu)
Changed in ubuntu-z-systems:
assignee: nobody → Skipper Bug Screeners (skipper-screen-team)
Changed in opencryptoki (Ubuntu):
importance: Undecided → High
Changed in ubuntu-z-systems:
importance: Undecided → High
status: New → Incomplete
Changed in opencryptoki (Ubuntu):
status: New → Incomplete
summary: - [23.04] Upgrade openCryptoki to latest version (3.20.0)
+ [23.04 FEAT] Upgrade openCryptoki to latest version (3.20.0)
Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2023-02-13 03:54 EDT-------
openCryptoki version 3.20.0 is now available at
https://github.com/opencryptoki/opencryptoki/releases/tag/v3.20.0

Revision history for this message
Frank Heimes (fheimes) wrote :

Many thx, Ingo, for the update.
Working on the package version bump right away ...

Changed in ubuntu-z-systems:
status: Incomplete → Triaged
Changed in opencryptoki (Ubuntu):
status: Incomplete → Triaged
Revision history for this message
Frank Heimes (fheimes) wrote :

A test build is available in the following PPA:
https://launchpad.net/~fheimes/+archive/ubuntu/lp2003847

Changed in ubuntu-z-systems:
status: Triaged → In Progress
Changed in opencryptoki (Ubuntu):
status: Triaged → In Progress
assignee: Skipper Bug Screeners (skipper-screen-team) → Frank Heimes (fheimes)
Revision history for this message
Frank Heimes (fheimes) wrote :

The reverse dependent packages of opencryptoki:
   Reverse-Build-Depends
     * simple-tpm-pk11 (for libopencryptoki-dev)
     * tpm-tools (for libopencryptoki-dev)
have also been build successfully (in the same PPA like before).

Revision history for this message
Frank Heimes (fheimes) wrote :
Revision history for this message
Frank Heimes (fheimes) wrote :

New upgraded package uploaded, should land in lunar-proposed soon ...

Revision history for this message
Frank Heimes (fheimes) wrote :

Landed in lunar-proposed:
 opencryptoki | 3.20.0+dfsg-0ubuntu1 | lunar-proposed/universe | source, amd64, arm64, armhf, ppc64el, s390x
hence updating ticket to 'Fix Committed'.

Changed in ubuntu-z-systems:
status: In Progress → Fix Committed
Changed in opencryptoki (Ubuntu):
status: In Progress → Fix Committed
information type: Private → Public
tags: added: patch
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package opencryptoki - 3.20.0+dfsg-0ubuntu1

---------------
opencryptoki (3.20.0+dfsg-0ubuntu1) lunar; urgency=medium

  * New upstream release (LP: #2003847), includes support for:
    - ep11 token: master key consistency (LP: #2003629)
    - ica and soft tokens: PKCS #11 3.0 - support AES_XTS (LP: #2003630)
    - ep11 token: PKCS #11 3.0 - support AES_XTS (LP: #2003632)
    - Support of ep11 token for new IBM Z Hardware (IBM z16) (LP: #2003635)
    - ep11 token: vendor specific key derivation (LP: #2003638)
    - key gen. with expected MKVP only on CCA and EP11 tokens (LP: #2003639)
    - p11sak support Dilithium and Kyber keys (LP: #2003669)
  * Remove patch
    d/p/lp-1982842-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
    since it's included in 3.19 and newer.
  * Remove patch
    d/p/lp-1989558-common-fix-memory-leak-in-save_private_token_object.patch
    since it's included in 3.19 and newer.
  * Adjust patch d/p/01-disable-testcases.patch due to minor change in context.
  * Refresh patch d/p/03-dlopen-soname.patch to fix 'fuzz'.
  * Modified patch
    d/p/lp-1982842-move-pkcs11-group-assigment-from-makefile-to-postinst.patch
    due to change in context, refresh it to fix 'fuzz' and remove addgroup
    from Makefile.am, since this is handled in d/opencryptoki.postinst.
  * Add opencryptoki.pc to d/libopencryptoki-dev.install.
  * Add new config file ccatok.conf to d/opencryptoki.install.s390x.
  * Consolidate multiple /etc/opencryptoki/*.conf entries in
    d/opencryptoki.install to one line and make it more generic.
  * Migrate in d/rules from 'dh_install --fail-missing --sourcedir=debian/tmp'
    to 'dh_install --sourcedir=debian/tmp' and 'dh_missing --fail-missing'.
  * Update 'Standards-Version' field in d/control to latest version 4.6.1.0.
  * Expand the copyright year range in d/copyright relfecting the latest code.

 -- Frank Heimes <email address hidden> Mon, 13 Feb 2023 10:10:45 +0100

Changed in opencryptoki (Ubuntu):
status: Fix Committed → Fix Released
Frank Heimes (fheimes)
Changed in ubuntu-z-systems:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.