Accepting request 1187477 from home:ayankov:branches:devel:libraries:c_c++

- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib 
  * Fix some iterator debugging errors in TLS CBC decryption. 
  * Avoid a miscompilation in ARIA when using XCode 14

OBS-URL: https://build.opensuse.org/request/show/1187477
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/Botan?expand=0&rev=118

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1 @@
+.osc

Botan-2.19.3.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dae047f399c5a47f087db5d3d9d9e8f11ae4985d14c928d71da1aff801802d55
+size 6105896

Botan-2.19.3.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmN1EHoACgkQYhHr8e+6
+37xxPggAp0uJtVxOzeAmFXMiW1jwB0Ctz3MqKkVI9bxSdOrJMb31B/ZO3dDYTO/G
+TCMzzuh8F1a+FKK9sTFI45OzMOFaoTemm+p76uuVwXl+UkcoU1huzOKtFB51Gdpy
+auzbiInsVVXPDSORy5Ic6B6WmZvxx2BEtN7dLjcxVP1WboJZLvTWlccBRxCTVDn3
+8JnU41x+W7LNc4+2M3gQoRgo0eibVpJ7G46FkapFVi5HuuIERsAUKO0zF3slRJwe
+Z7fOdQLRuq4ZA8QQikRX/B1cMhRPXP0m9qXM3g2xvu+eckCZvByzx9KibOJa++Y+
+SA9RVKtyvF1EQNZxH4SO3/1cfzTw1w==
+=SgX6
+-----END PGP SIGNATURE-----

Botan-2.19.5.tar.xz.asc

@@ -0,0 +1,12 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmaL/agACgkQYhHr8e+6
+37wGJggAnreZh5SxH/FQTgeLtLD+Fb11cnyBstQeWuJq0Np/bPSsEzwgMLu9F/0/
+DWOH74eDLds8FUhh/w39bOkNgd2r6FTBLjnN1g8M86jsTg7ILlG04tbc1GF79Mx8
+GxDBdfNsKmqKEzVJBWHbwnqjvOR9oO2bdKLe2NCJ9jyrw5xyHNhfOEG7zXzpfFFN
+DM16kl2OVYnYrbDQyVGW9JNi+038qyR3fBfkWInOd8WoiimrOTk5+HuBL06RhWGN
+yiHT9P5AK/45fhCcs0yFiUpfrz85MfqqT6vIygV7v2fDElfpTX12LB1I7id8QyDN
+m9gqpB0mP0ewxaO0sIuV0UXk+ntfDg==
+=IUJq
+-----END PGP SIGNATURE-----
+

Botan.keyring

@@ -0,0 +1,31 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2
+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+=0I8E
+-----END PGP PUBLIC KEY BLOCK-----

Botan.spec

@@ -0,0 +1,151 @@
+#
+# spec file for package Botan
+#
+# Copyright (c) 2024 SUSE LLC
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%{!?make_build: %define make_build make %{?_smp_mflags}}
+%define version_suffix 2-19
+%define short_version 2
+Name:           Botan
+Version:        2.19.5
+Release:        0
+Summary:        A C++ Crypto Library
+License:        BSD-2-Clause
+Group:          Development/Libraries/C and C++
+URL:            https://botan.randombit.net
+Source0:        https://botan.randombit.net/releases/Botan-%{version}.tar.xz
+Source1:        https://botan.randombit.net/releases/Botan-%{version}.tar.xz.asc
+Source2:        %{name}.keyring
+Source3:        baselibs.conf
+BuildRequires:  bzip2 >= 1.0.2
+BuildRequires:  gcc-c++
+BuildRequires:  libbz2-devel
+BuildRequires:  pkgconfig
+BuildRequires:  python3
+BuildRequires:  trousers-devel
+BuildRequires:  zlib-devel
+BuildRequires:  pkgconfig(liblzma)
+BuildRequires:  pkgconfig(sqlite3)
+
+%description
+Botan is a C++ library that provides support for many common
+cryptographic operations, including encryption, authentication, and
+X.509v3 certificates and CRLs. A wide variety of algorithms is
+supported, including RSA, DSA, DES, AES, MD5, and SHA-1.
+
+%package     -n libbotan-%{version_suffix}
+Summary:        A C++ Crypto Library
+Group:          System/Libraries
+
+%description -n libbotan-%{version_suffix}
+Botan is a C++ library that provides support for many common
+cryptographic operations, including encryption, authentication, and
+X.509v3 certificates and CRLs. A wide variety of algorithms is
+supported, including RSA, DSA, DES, AES, MD5, and SHA-1.
+
+%package     -n libbotan-devel
+Summary:        Development files for Botan
+Group:          Development/Libraries/C and C++
+Requires:       libbotan-%{version_suffix} = %{version}
+Requires:       libbz2-devel
+Requires:       trousers-devel
+Requires:       pkgconfig(liblzma)
+Requires:       pkgconfig(sqlite3)
+Provides:       Botan-devel = %{version}
+Obsoletes:      Botan-devel < %{version}
+
+%description  -n libbotan-devel
+This package contains the header files and libraries needed to develop
+programs that use the Botan library.
+
+%package     -n python3-botan
+Summary:        Botan python bindings
+Group:          Development/Languages/Python
+Requires:       python3
+
+%description -n python3-botan
+This package contains the python bindings to libbotan's C98 interface.
+
+%package doc
+%define botan_docdir %{_docdir}/botan-%{version}
+Summary:        Documentation of Botan
+Group:          Development/Libraries/C and C++
+BuildArch:      noarch
+
+%description doc
+Documentation of Botan package.
+
+%prep
+%setup -q -n Botan-%{version}
+
+%build
+%define _lto_cflags %{nil}
+export RPM_OPT_FLAGS
+python3 ./configure.py \
+  --prefix=%{_prefix} \
+  --bindir=%{_bindir} \
+  --libdir=%{_libdir} \
+  --docdir=%{_defaultdocdir} \
+  --includedir=%{_includedir} \
+  --with-bzip2 \
+  --with-zlib \
+  --with-lzma \
+  --with-openmp \
+  --with-sqlite \
+  --with-tpm \
+%ifarch %{ix86}
+  --cpu=x86_32
+%else
+%ifarch %{arm}
+  --cpu=arm
+%else
+  --cpu=%{_target_cpu}
+%endif
+%endif
+
+%make_build WARN_FLAGS="%{optflags}"
+
+%install
+sed -i 's/env python/env python3/' src/scripts/install.py
+%make_install
+rm -f %{buildroot}/%{_libdir}/libbotan*.a
+chmod +x %{buildroot}%{python3_sitearch}/botan2.py
+sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan2.py
+
+rm %{buildroot}%{_bindir}/botan
+
+%check
+%make_build check
+
+%post -n libbotan-%{version_suffix} -p /sbin/ldconfig
+%postun -n libbotan-%{version_suffix} -p /sbin/ldconfig
+
+%files doc
+%docdir %{botan_docdir}
+%{botan_docdir}
+
+%files -n libbotan-%{version_suffix}
+%{_libdir}/libbotan-%{short_version}.so.*
+
+%files -n libbotan-devel
+%{_libdir}/libbotan-%{short_version}.so
+%{_libdir}/pkgconfig/botan-%{short_version}.pc
+%{_includedir}/botan-%{short_version}
+
+%files -n python3-botan
+%{python3_sitearch}/botan2.py
+
+%changelog

baselibs.conf

@@ -0,0 +1,4 @@
+libbotan-2-19
+libbotan-devel
+	requires -libbotan-<targettype> = <version>
+	requires "libbotan-2-19-<targettype> = <version>"