Recommended update for gcr, gnome-keyring

Announcement ID:	SUSE-RU-2024:3087-1
Rating:	moderate
References:	bsc#1039461 bsc#1043861 bsc#1085983 bsc#1086036 bsc#1227454 bsc#966225 bsc#966229 bsc#994988
Affected Products:	SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 12-SP5

An update that has eight fixes can now be installed.

Description:

This update for gcr, gnome-keyring fixes the following issues:

This update fixes a problem with the GNOME desktop not interacting with the openssh 8.4 client. (bsc#1227454)

Changes in gcr:

• Merge the gcr-ssh-askpass subpackage into gcr-prompter so that it's always available and the update from 3.20.0 to 3.28.1 doesn't require to install a new package (bsc#1227454)

• Update to version 3.28.1:

• system-prompter: Fix use of g_hash_table_lookup_extended.

• Update to version 3.28.0:

• Fix year 2038 workaround in ASN.1 decoder (bgo#787963).

• Fix test errors when ssh-keygen is not found.

• Supplement the new gcr-ssh-askpass for gpg2 and gnome-shell: GNOME users want to have this available to enter the ssh key passwords.

• Update to version 3.27.92:

• Provide API for reliably calling ssh programs (bgo#735873).

• Updated translations.

• Update to version 3.27.4:

• Fixes:

  • Encoding of EC parameters (bgo#785234).
  • Hang in certificate export dialog (bgo#789804).
  • Failure case in gcr_secure_memory_try_realloc() (bgo#775685).

• Switch to using GLib resources.

• Build fixes: bgo#771052, bgo#775685, bgo#775966, bgo#774312, bgo#774311, bgo#764562, bgo#764569.
• Updated translations.

Changes in gnome-keyring:

• This update to 3.28.2 in SLE12 fixes bsc#1227454.

• Allow pam to open keyring when using sddm

• Update to version 3.28.2:

• Fix glitches in ssh-agent (bgo#795699).

• Updated translations.

• Allow using more memory than the maximum lockable amount (bsc#1085983).

• Update to version 3.28.0.2:

• Fix glitches in ssh-agent (bgo#794361, bgo#794368, bgo#794369, bgo#794500, bgo#794631).

• Update to version 3.28.0.1:

• Fix linking with "-z defs" (bgo#794274).

• Update to version 3.28.0:

• Fix TAP test driver.

• Update to version 3.27.92:

• Wrap stock ssh-agent from OpenSSH (bgo#775981).

• Stop installing p11-kit configuration file for the PKCS#11 module (bgo#791401).

• Updated translations.

• Add openssh BuildRequires: needed for ssh-agent wrapper.

• Update to version 3.27.4:

• Add support for SHA2 extension for RSA signatures in ssh-agent (bgo#790910).

• Build fixes (bgo#792278, bgo#787387).

• Updated translations.

• Update to version 3.27.2:

• Add support for ECDSA in ssh-agent (bgo#641082).

• Wipe passwords stored by the PAM module (bgo#781486).
• Fix:
  • Shared key derivation between libsecret and gnome-keyring (bgo#778357).
  • Erroneous handling of partial writes in write_sync_close (bgo#778269).
• Set CKF_LOGIN_REQUIRED flag in ssh-module.

• Build and testing fixes (bgo#774312, bgo#781785).

• Update to version 3.20.1:

• Fix boolean logic error in ssh-agent.

• Pass the correct argc to gkr_pam_client_run_operation (bgo#766222).
• Look for both dlopen and dlsym when configuring (bgo#766221).
• Fix .so link in gnome-keyring-3 man page (bgo#767095).
• Die if the XDG session we were started under goes away (bgo#768943).
• Shorten unlock keyring dialog title (bgo#770170).

• Updated translations.

• Added a man page for the PAM module (bsc#1039461, bgo#784051)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Software Development Kit 12 SP5
  zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-3087=1
• SUSE Linux Enterprise High Performance Computing 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3087=1
• SUSE Linux Enterprise Server 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3087=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3087=1
• SUSE Linux Enterprise Workstation Extension 12 12-SP5
  zypper in -t patch SUSE-SLE-WE-12-SP5-2024-3087=1

Package List:

• SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)
  • libgck-devel-3.28.1-15.3.1
  • gcr-debugsource-3.28.1-15.3.1
  • typelib-1_0-GcrUi-3-3.28.1-15.3.1
  • libgcr-devel-3.28.1-15.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
  • gcr-viewer-debuginfo-3.28.1-15.3.1
  • gnome-keyring-debugsource-3.28.2-34.3.1
  • gnome-keyring-pam-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-3.28.2-34.3.1
  • gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-debuginfo-3.28.1-15.3.1
  • gcr-prompter-3.28.1-15.3.1
  • libgck-1-0-debuginfo-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-viewer-3.28.1-15.3.1
  • gcr-debugsource-3.28.1-15.3.1
  • gcr-data-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-3.28.1-15.3.1
  • typelib-1_0-Gck-1-3.28.1-15.3.1
  • typelib-1_0-Gcr-3-3.28.1-15.3.1
  • gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-prompter-debuginfo-3.28.1-15.3.1
  • libgck-1-0-3.28.1-15.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
  • gnome-keyring-lang-3.28.2-34.3.1
  • gcr-lang-3.28.1-15.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)
  • gnome-keyring-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-32bit-3.28.2-34.3.1
  • gnome-keyring-32bit-3.28.2-34.3.1
• SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
  • gcr-viewer-debuginfo-3.28.1-15.3.1
  • gnome-keyring-debugsource-3.28.2-34.3.1
  • gnome-keyring-pam-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-3.28.2-34.3.1
  • gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-debuginfo-3.28.1-15.3.1
  • gcr-prompter-3.28.1-15.3.1
  • libgck-1-0-debuginfo-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-viewer-3.28.1-15.3.1
  • gcr-debugsource-3.28.1-15.3.1
  • gcr-data-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-3.28.1-15.3.1
  • typelib-1_0-Gck-1-3.28.1-15.3.1
  • typelib-1_0-Gcr-3-3.28.1-15.3.1
  • gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-prompter-debuginfo-3.28.1-15.3.1
  • libgck-1-0-3.28.1-15.3.1
• SUSE Linux Enterprise Server 12 SP5 (noarch)
  • gnome-keyring-lang-3.28.2-34.3.1
  • gcr-lang-3.28.1-15.3.1
• SUSE Linux Enterprise Server 12 SP5 (s390x x86_64)
  • gnome-keyring-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-32bit-3.28.2-34.3.1
  • gnome-keyring-32bit-3.28.2-34.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
  • gcr-viewer-debuginfo-3.28.1-15.3.1
  • gnome-keyring-debugsource-3.28.2-34.3.1
  • gnome-keyring-pam-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-3.28.2-34.3.1
  • gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-debuginfo-3.28.1-15.3.1
  • gcr-prompter-3.28.1-15.3.1
  • libgck-1-0-debuginfo-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-viewer-3.28.1-15.3.1
  • gcr-debugsource-3.28.1-15.3.1
  • gcr-data-3.28.1-15.3.1
  • libgck-modules-gnome-keyring-3.28.2-34.3.1
  • libgcr-3-1-3.28.1-15.3.1
  • typelib-1_0-Gck-1-3.28.1-15.3.1
  • typelib-1_0-Gcr-3-3.28.1-15.3.1
  • gnome-keyring-debuginfo-3.28.2-34.3.1
  • gcr-prompter-debuginfo-3.28.1-15.3.1
  • libgck-1-0-3.28.1-15.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
  • gnome-keyring-lang-3.28.2-34.3.1
  • gcr-lang-3.28.1-15.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)
  • gnome-keyring-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-debuginfo-32bit-3.28.2-34.3.1
  • gnome-keyring-pam-32bit-3.28.2-34.3.1
  • gnome-keyring-32bit-3.28.2-34.3.1
• SUSE Linux Enterprise Workstation Extension 12 12-SP5 (x86_64)
  • libgck-1-0-debuginfo-32bit-3.28.1-15.3.1
  • libgcr-3-1-debuginfo-32bit-3.28.1-15.3.1
  • gcr-debugsource-3.28.1-15.3.1
  • libgcr-3-1-32bit-3.28.1-15.3.1
  • libgck-1-0-32bit-3.28.1-15.3.1

References:

• https://bugzilla.suse.com/show_bug.cgi?id=1039461
• https://bugzilla.suse.com/show_bug.cgi?id=1043861
• https://bugzilla.suse.com/show_bug.cgi?id=1085983
• https://bugzilla.suse.com/show_bug.cgi?id=1086036
• https://bugzilla.suse.com/show_bug.cgi?id=1227454
• https://bugzilla.suse.com/show_bug.cgi?id=966225
• https://bugzilla.suse.com/show_bug.cgi?id=966229
• https://bugzilla.suse.com/show_bug.cgi?id=994988