Accepting request 76190 from security

- update to 1.7.8:
  + many changes, please see /usr/share/doc/packages/john/CHANGES
  + The bitslice DES S-box expressions have been replaced with those 
    generated by Roman Rusakov specifically for John the Ripper
  + Added Intel AVX and AMD XOP instruction sets support for bitslice DES
  + Apache "$apr1$" MD5-based password hashes are now supported.
  + the loader now includes logic to warn the user of ambiguous 
    hash encodings
  + "DateTime", "Repeats", "Subsets", "AtLeast1-Simple", 
    "AtLeast1-Generic", and "Policy" external mode samples have been 
    added to the default john.conf
  + A few minor bug fixes and enhancements were made
  + Corrected a logic error introduced in JtR 1.7.4.2: in 
    "single crack" mode
- added and updated jumbo patch

- go from jumbo patch 7 to 12
- needs -lm to link, via LDFLAGS from make command in spec

OBS-URL: https://build.opensuse.org/request/show/76190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/john?expand=0&rev=12

john-1.7.6.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4fdfebebdc1523869f3c64a2993ff7041c8af47e9c58309575d1fdef54636c0f
-size 669568

john-1.7.8-jumbo-2.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e99c9ee861f7500bfc708c7b7a508da7336f621eedf1301a86ce0d2f5c4ca706
+size 1026712

john-1.7.8-jumbo-2.tar.bz2.sign

@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.10 (GNU/Linux)
+Comment: http://www.openwall.com/signatures/
+
+iQCVAwUATg+zyXK5fbEpUCnxAQLpwgP/WrKg2XvgG/gUydhBaBm0JMWy8xmuNvu4
+E1TdRf3bZnt4BEh5kWfBNRQ2CYBBTUNGiuXFJ9UbT7ul3saop26zg3852OfyJj36
+XAlOojW+DQnR5C2k+cGp8FCs9fP3a2u+sA8mgOYPQD9RkPas1t0mYlWFRMDEV5iC
+gmlHZctmtXo=
+=IDug
+-----END PGP SIGNATURE-----

john-1.7.8.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:54388422b5eb048da8d5363082e62aa012f4f29a5a14feab67f84d650d0bc5e9
+size 695897

john-1.7.8.tar.bz2.sign

@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.10 (GNU/Linux)
+Comment: http://www.openwall.com/signatures/
+
+iQCVAwUATgICWXK5fbEpUCnxAQIhCgQAqrfc600ljWZJOrLXnQAHIS4z97NY8AWk
+j1fmq19h2pzCzaO+LMsgB/trS89IKXlMpyGtKszJl41IfRx/oFCJRIKeKGJA5TVO
+vk1MGx7H647MRqpLu6JftLP2nG/tyLD6n9hBl9cSsvK0bGP536QT+YBzhYZyo8w9
+/5U/gZhbkaU=
+=8CMt
+-----END PGP SIGNATURE-----

john.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Fri Jul  8 08:56:40 UTC 2011 - lars@linux-schulserver.de
+
+- update to 1.7.8:
+  + many changes, please see /usr/share/doc/packages/john/CHANGES
+  + The bitslice DES S-box expressions have been replaced with those 
+    generated by Roman Rusakov specifically for John the Ripper
+  + Added Intel AVX and AMD XOP instruction sets support for bitslice DES
+  + Apache "$apr1$" MD5-based password hashes are now supported.
+  + the loader now includes logic to warn the user of ambiguous 
+    hash encodings
+  + "DateTime", "Repeats", "Subsets", "AtLeast1-Simple", 
+    "AtLeast1-Generic", and "Policy" external mode samples have been 
+    added to the default john.conf
+  + A few minor bug fixes and enhancements were made
+  + Corrected a logic error introduced in JtR 1.7.4.2: in 
+    "single crack" mode
+- added and updated jumbo patch
+
+-------------------------------------------------------------------
+Tue Mar 15 06:42:36 CET 2011 - draht@suse.de
+
+- go from jumbo patch 7 to 12
+- needs -lm to link, via LDFLAGS from make command in spec
+
 -------------------------------------------------------------------
 Thu Sep  9 16:39:40 UTC 2010 - lars@linux-schulserver.de
 

john.spec

@@ -22,17 +22,19 @@ Name:           john
 Url:            http://www.openwall.com/john/
 License:        GPLv2+
 Group:          Productivity/Security
-Version:        1.7.6
+Version:        1.7.8
 Release:        1
 Summary:        Detects Weak Passwords
 Source:         %{name}-%{version}.tar.bz2
 Source2:        %{name}.8.gz 
 Source3:        %{name}-rpmlintrc
+Source4:        %{name}-%{version}-jumbo-2.tar.bz2
+BuildRequires:  openssl-devel
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %define         johndir /var/lib/john
-%define cflags CFLAGS="-c $RPM_OPT_FLAGS -DJOHN_SYSTEMWIDE=1 -finline-limit=2000 --param inline-unit-growth=2000" LDFLAGS=""
+%define cflags CFLAGS="-c $RPM_OPT_FLAGS -DJOHN_SYSTEMWIDE=1 -finline-limit=2000 --param inline-unit-growth=2000" LDFLAGS="-lcrypto"
 %ifarch x86_64
-%define cflags CFLAGS="-c $RPM_OPT_FLAGS -DJOHN_SYSTEMWIDE=1" LDFLAGS=""
+%define cflags CFLAGS="-c $RPM_OPT_FLAGS -DJOHN_SYSTEMWIDE=1" LDFLAGS="-lcrypto"
 %endif
 
 %description
@@ -48,6 +50,8 @@ Authors:
 
 %prep
 %setup -q -n %{name}-%{version}
+# apply the jumbo patch
+gzip -dc %{SOURCE4} | patch -p1
 # adapt the configs
 perl -pi -e "s#Wordlist = (.*)#Wordlist = %{johndir}/password.lst#g" $RPM_BUILD_DIR/%{name}-%{version}/run/john.conf
 perl -pi -e 's#^(\#define JOHN_SYSTEMWIDE_EXEC)\s.+$#$1\t\"%{johndir}\"#g' $RPM_BUILD_DIR/%{name}-%{version}/src/params.h
@@ -91,7 +95,7 @@ fi
 %endif
 export TARGET
 pushd src
-make clean $TARGET %{cflags}
+make clean $TARGET %{cflags} LDFLAGS='-lcrypto -lm'
 popd
 
 %check