From 1e84b1513d7e3ec36b3b2553aceaaf53cf9aca2d1b27ae69ac03ab594f7a36bc Mon Sep 17 00:00:00 2001
From: Michal Vyskocil <michal.vyskocil@gmail.com>
Date: Tue, 9 Feb 2016 21:32:46 +0000
Subject: [PATCH] Accepting request 358619 from security:privacy

update to 1.6.5: CVE-2015-7511: Mitigate side-channel attack on ECDH with Weierstrass curves (boo#965902)

OBS-URL: https://build.opensuse.org/request/show/358619
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=79
---
 libgcrypt-1.6.4.tar.bz2     |   3 ---
 libgcrypt-1.6.4.tar.bz2.sig | Bin 287 -> 0 bytes
 libgcrypt-1.6.5.tar.bz2     |   3 +++
 libgcrypt-1.6.5.tar.bz2.sig | Bin 0 -> 287 bytes
 libgcrypt.changes           |   7 +++++++
 libgcrypt.spec              |   6 +++---
 6 files changed, 13 insertions(+), 6 deletions(-)
 delete mode 100644 libgcrypt-1.6.4.tar.bz2
 delete mode 100644 libgcrypt-1.6.4.tar.bz2.sig
 create mode 100644 libgcrypt-1.6.5.tar.bz2
 create mode 100644 libgcrypt-1.6.5.tar.bz2.sig

diff --git a/libgcrypt-1.6.4.tar.bz2 b/libgcrypt-1.6.4.tar.bz2
deleted file mode 100644
index d778ab8..0000000
--- a/libgcrypt-1.6.4.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c9bc2c7fe2e5f4ea13b0c74f9d24bcbb1ad889bb39297d8082aebf23f4336026
-size 2549820
diff --git a/libgcrypt-1.6.4.tar.bz2.sig b/libgcrypt-1.6.4.tar.bz2.sig
deleted file mode 100644
index 46e189155985c523969387515663844c9013f07afd8f127d4ac92ea89c2cda7c..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 287
zcmV+)0pR|L0UQJX0SEvF1p-y>gyjGV2@oWkInqxh<F>G=2mgO7H0=v4DABu_Oh60L
zPG@LBVgbvtUkRvl=8i-U!Mkp7k60nam`N+^PlOop{kLTWItogcD~_#@@P#y?u=K~m
z6oooNs<xIW{VP<pF?01Kvc64>TF`70X9~NTo)YcDl<EjWUswSZIA|cCy)i2p+v&sd
zW+eDG(i#)p=J`O4T-dP64Saz@2o`cq9urq%>BsTti(DVU3~-d{sNXK6o0cbY`ORW!
z(gc{0pYC%Jj1JjP7w#Z8&KW3t#<qh-?-QnTESpzEbH(p!b2ac*H)~JA&?~PA1bno=
lzRbyLk(y1OP)il?C2PFBbd*Z9)I>Bppo4@?cCr<WAw_&HgAV`z

diff --git a/libgcrypt-1.6.5.tar.bz2 b/libgcrypt-1.6.5.tar.bz2
new file mode 100644
index 0000000..eae2b0e
--- /dev/null
+++ b/libgcrypt-1.6.5.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f49ebc5842d455ae7019def33eb5a014a0f07a2a8353dc3aa50a76fd1dafa924
+size 2549601
diff --git a/libgcrypt-1.6.5.tar.bz2.sig b/libgcrypt-1.6.5.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..f8c08c300026046967fff06f8d43b0ddd5791e37a1955ec130ef3d427b5118e3
GIT binary patch
literal 287
zcmV+)0pR|L0UQJX0SEvF1p-#Nz?A?B2@oWkInqxh<F;<v2mp?&sCWNPy8suoO}oZe
zPEo{<v6M+&@xDO1m2z69u=JDIJG3-nmm{SMIrq26tN|B1u}W0g+|szCN)=2>`6#WG
z@IE6YZf>a60&6x$ASB-*bhC`e?Y-|(?s7IYVRqh*fdLBP1ytbmk|H4{)GW3J<1_Z4
zmCpyMp`5)z8pf(kV#dng%8>SvBzl0Sf|EsC)m!sr$ntC}<%0it_W-oIZObJ>t;{~<
z+%T<_)@_A~Ob=!nZ5KLb^_+VvmTnzN{v0zmz91g!Q$_%^yht*CUQM9k8{&`jN-eYQ
lwk(cv&P^jbFqd>z)v|_0hLuO41PRpKhur!;mmJ%c=3(8ei4gz*

literal 0
HcmV?d00001

diff --git a/libgcrypt.changes b/libgcrypt.changes
index 448dfb8..9de1073 100644
--- a/libgcrypt.changes
+++ b/libgcrypt.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Feb  9 20:51:59 UTC 2016 - astieger@suse.com
+
+- update to 1.6.5:
+  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
+    Weierstrass curves (boo#965902)
+
 -------------------------------------------------------------------
 Sat Oct 10 11:56:08 UTC 2015 - astieger@suse.com
 
diff --git a/libgcrypt.spec b/libgcrypt.spec
index 0a67f93..565f8cf 100644
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libgcrypt
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,10 +19,10 @@
 %define build_hmac256 1
 %define separate_hmac256_binary 0
 %define libsoname %{name}20
-%define sosuffix  20.0.4
+%define sosuffix  20.0.5
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.6.4
+Version:        1.6.5
 Release:        0
 Summary:        The GNU Crypto Library
 License:        GPL-2.0+ and LGPL-2.1+ and GPL-3.0+