shield Recommended update for keyutils
SUSE-SLE-Module-Basesystem-15-SP3-2021-3891


This update for keyutils fixes the following issues: - Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654) keyutils was updated to 1.6.3 (jsc#SLE-20016): * Revert the change notifications that were using /dev/watch_queue. * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE). * Allow "keyctl supports" to retrieve raw capability data. * Allow "keyctl id" to turn a symbolic key ID into a numeric ID. * Allow "keyctl new_session" to name the keyring. * Allow "keyctl add/padd/etc." to take hex-encoded data. * Add "keyctl watch*" to expose kernel change notifications on keys. * Add caps for namespacing and notifications. * Set a default TTL on keys that upcall for name resolution. * Explicitly clear memory after it's held sensitive information. * Various manual page fixes. * Fix C++-related errors. * Add support for keyctl_move(). * Add support for keyctl_capabilities(). * Make key=val list optional for various public-key ops. * Fix system call signature for KEYCTL_PKEY_QUERY. * Fix 'keyctl pkey_query' argument passing. * Use keyctl_read_alloc() in dump_key_tree_aux(). * Various manual page fixes. Updated to 1.6: * Apply various specfile cleanups from Fedora. * request-key: Provide a command line option to suppress helper execution. * request-key: Find least-wildcard match rather than first match. * Remove the dependency on MIT Kerberos. * Fix some error messages * keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes. * Fix doc and comment typos. * Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20). * Add pkg-config support for finding libkeyutils. * upstream isn't offering PGP signatures for the source tarballs anymore Updated to 1.5.11 (bsc#1113013) * Add keyring restriction support. * Add KDF support to the Diffie-Helman function. * DNS: Add support for AFS config files and SRV records

  • Release Date
    Dec 3 2021
  • References
    Bugzilla: 1187654, 1029961, 1113013
  • Type
    recommended
  • Severity
    moderate

cloud_download Downloads

Basesystem Module 15.3 s390x
  • Packages
    keyutils
    Linux Key Management Utilities
    1.6.3-5.6.1 lock rpm lock src
    keyutils-devel
    Development package for building linux key management utilities
    1.6.3-5.6.1 lock rpm
    libkeyutils1
    Key utilities library
    1.6.3-5.6.1 lock rpm
Basesystem Module 15.3 aarch64
  • Packages
    keyutils
    Linux Key Management Utilities
    1.6.3-5.6.1 lock rpm lock src
    keyutils-devel
    Development package for building linux key management utilities
    1.6.3-5.6.1 lock rpm
    libkeyutils1
    Key utilities library
    1.6.3-5.6.1 lock rpm
Basesystem Module 15.3 ppc64le
  • Packages
    keyutils
    Linux Key Management Utilities
    1.6.3-5.6.1 lock rpm lock src
    keyutils-devel
    Development package for building linux key management utilities
    1.6.3-5.6.1 lock rpm
    libkeyutils1
    Key utilities library
    1.6.3-5.6.1 lock rpm
Basesystem Module 15.3 x86_64
  • Packages
    keyutils
    Linux Key Management Utilities
    1.6.3-5.6.1 lock rpm lock src
    keyutils-devel
    Development package for building linux key management utilities
    1.6.3-5.6.1 lock rpm
    libkeyutils1
    Key utilities library
    1.6.3-5.6.1 lock rpm
    libkeyutils1-32bit
    Key utilities library
    1.6.3-5.6.1 lock rpm