From 27c67e36711ada18d4a17916fbb1c5a21d9ee5a48ec8bd7ed7726ec480500da5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=ADt=C4=9Bzslav=20=C4=8C=C3=AD=C5=BEek?=
 <vcizek@suse.com>
Date: Fri, 30 Jun 2017 06:36:55 +0000
Subject: [PATCH] Accepting request 507220 from security:privacy

libgcrypt 1.7.8 CVE-2017-7526 bsc#1046607

OBS-URL: https://build.opensuse.org/request/show/507220
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=95
---
 libgcrypt-1.7.7.tar.bz2     |   3 ---
 libgcrypt-1.7.7.tar.bz2.sig | Bin 310 -> 0 bytes
 libgcrypt-1.7.8.tar.bz2     |   3 +++
 libgcrypt-1.7.8.tar.bz2.sig | Bin 0 -> 310 bytes
 libgcrypt.changes           |   7 +++++++
 libgcrypt.spec              |   2 +-
 6 files changed, 11 insertions(+), 4 deletions(-)
 delete mode 100644 libgcrypt-1.7.7.tar.bz2
 delete mode 100644 libgcrypt-1.7.7.tar.bz2.sig
 create mode 100644 libgcrypt-1.7.8.tar.bz2
 create mode 100644 libgcrypt-1.7.8.tar.bz2.sig

diff --git a/libgcrypt-1.7.7.tar.bz2 b/libgcrypt-1.7.7.tar.bz2
deleted file mode 100644
index 2da4818..0000000
--- a/libgcrypt-1.7.7.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b9b85eba0793ea3e6e66b896eb031fa05e1a4517277cc9ab10816b359254cd9a
-size 2861190
diff --git a/libgcrypt-1.7.7.tar.bz2.sig b/libgcrypt-1.7.7.tar.bz2.sig
deleted file mode 100644
index 3000b23f6a464a37ff1ff91c8444fadf30804b564eaa149f628049392736390c..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 310
zcmV-60m=S}0W$;u0SEvc79j-KX(1!T23_i24?49Zn>o@?CF8aQ0$DK-$p8uo5G0#9
z(oZGhwjRz0|5x>#tV-&}^ME16Ci$S8b^pFUZ#|I-zKpY}WU{21VFeNS!j(y`%hkA%
zMGU3V>DAvUq8~`4Qf6LaTZ<XF^UZ1`<6?;KrGp5uk1YT9#GjuUw$(HBg=4dej&6ho
z1dbbF{6__=pZXm{#iL=7{a}EI6mg=Zu>GVa({>qeSjlTnWxCVig1$J^YoZq3Ub4B<
z*C=ma=j8LmO{{Ak=IZN(Y*1Z_S-}7F6+OVnm6SuVh_gDLUW$8Fj`IKfke5EmJ~h-S
z94`k(Gmg@?{fw5{Kl=O)u5~V=Pa3&3bP%?;46>^y7HVhgC!P0+wr2uHd#Du)lOdfM
I$xqca)R=OZWdHyG

diff --git a/libgcrypt-1.7.8.tar.bz2 b/libgcrypt-1.7.8.tar.bz2
new file mode 100644
index 0000000..c07d44a
--- /dev/null
+++ b/libgcrypt-1.7.8.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:948276ea47e6ba0244f36a17b51dcdd52cfd1e664b0a1ac3bc82134fb6cec199
+size 2897853
diff --git a/libgcrypt-1.7.8.tar.bz2.sig b/libgcrypt-1.7.8.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..cb2b48b66dd64f9cf05e5bc19072968d59e222d17c0cdbe1b36ac04cf0ed6b36
GIT binary patch
literal 310
zcmV-60m=S}0W$;u0SEvc79j-KX(1!T23_i24?49Zn>o@?CF8aQ0$Eh05daDa5G0#9
z(oZGhwpn5a{wVx`a5JjSbj>jxg&S55J`<_EEi`j#tHmj6w^eM`fF{pclF8?+VQ{mb
z(_Nh$?Alm^T>VI)7BNQ<a|`2E8BK_t;`o&aU0qw9C?(aRJ!Nebc+V@`%f4v0FVXqt
ztStJR8}^5xfT<uHy?YQ2X#;(7A<RyAG}vuJ#rmNR>t{=)ZhQY4v5H>2T(5@^E-*US
zlEFsw2|`PPVJbNg+F|YYa-~4?G$8o8d4SOadh_(2s0UnN&NUiPriy!mAuClfVy{<;
zc8caWp|fM+1~$1A2A2TsMi@KUpM1hAz%~VLkJwXPg!A0tHXN44W0j1e8>;q!&-r&$
I1xcj6(eH_jcmMzZ

literal 0
HcmV?d00001

diff --git a/libgcrypt.changes b/libgcrypt.changes
index 427def0..de3b59b 100644
--- a/libgcrypt.changes
+++ b/libgcrypt.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Jun 29 09:49:44 UTC 2017 - astieger@suse.com
+
+- libgcrypt 1.7.8:
+  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
+    RSA secret keys (bsc#1046607)
+
 -------------------------------------------------------------------
 Sun Jun  4 19:26:12 UTC 2017 - astieger@suse.com
 
diff --git a/libgcrypt.spec b/libgcrypt.spec
index ab7a059..272a47a 100644
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -21,7 +21,7 @@
 %define libsoname %{name}20
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.7.7
+Version:        1.7.8
 Release:        0
 Summary:        The GNU Crypto Library
 License:        GPL-2.0+ and LGPL-2.1+ and GPL-3.0+