From 8489ad1fbdfc516f95d68722abf1627ac58611c57bc183a29d01f3d84d0cd178 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Mon, 11 May 2020 05:52:49 +0000 Subject: [PATCH] Accepting request 802533 from home:AndreasStieger:branches:security:tls GNU Nettle 3.6 OBS-URL: https://build.opensuse.org/request/show/802533 OBS-URL: https://build.opensuse.org/package/show/security:tls/libnettle?expand=0&rev=11 --- baselibs.conf | 4 ++-- libnettle-rpmlintrc | 2 ++ libnettle.changes | 25 ++++++++++++++++++++++++ libnettle.spec | 24 +++++++++++------------ nettle-3.5.1.tar.gz | 3 --- nettle-3.5.1.tar.gz.sig | Bin 374 -> 0 bytes nettle-3.6.tar.gz | 3 +++ nettle-3.6.tar.gz.sig | Bin 0 -> 374 bytes nettle-respect-cflags.patch | 38 ------------------------------------ 9 files changed, 44 insertions(+), 55 deletions(-) create mode 100644 libnettle-rpmlintrc delete mode 100644 nettle-3.5.1.tar.gz delete mode 100644 nettle-3.5.1.tar.gz.sig create mode 100644 nettle-3.6.tar.gz create mode 100644 nettle-3.6.tar.gz.sig delete mode 100644 nettle-respect-cflags.patch diff --git a/baselibs.conf b/baselibs.conf index cc1cae8..2ced3af 100644 --- a/baselibs.conf +++ b/baselibs.conf @@ -1,3 +1,3 @@ -libnettle7 +libnettle8 libnettle-devel -libhogweed5 +libhogweed6 diff --git a/libnettle-rpmlintrc b/libnettle-rpmlintrc new file mode 100644 index 0000000..147fe3a --- /dev/null +++ b/libnettle-rpmlintrc @@ -0,0 +1,2 @@ +addFilter("libnettle.* hidden-file-or-dir .*hmac") +addFilter("libhogweed.* hidden-file-or-dir .*hmac") diff --git a/libnettle.changes b/libnettle.changes index eb787ee..18ffa83 100644 --- a/libnettle.changes +++ b/libnettle.changes @@ -1,3 +1,28 @@ +------------------------------------------------------------------- +Sun May 10 19:32:12 UTC 2020 - Andreas Stieger + +- GNU Nettle 3.6: + * removal of internal and undocumented poly1305 functions + * Support for Curve448 and ED448 signatures + * Support for SHAKE256, SIV-CMAC, CMAC64, "CryptoPro" variant of + the GOST hash (as gosthash94cp), GOST DSA signatures, including + GOST curves gc256b and gc512a + * Support for Intel CET in x86 and x86_64 assembly files, if + enabled via CFLAGS (gcc --fcf-protection=full) + * A few new functions to improve support for the Chacha + variant with 96-bit nonce and 32-bit block counter (the + existing functions use nonce and counter of 64-bit each), + and functions to set the counter. + * New interface, struct nettle_mac, for MAC (message + authentication code) algorithms. This abstraction is only + for MACs that don't require a per-message nonce. For HMAC, + the key size is fixed, and equal the digest size of the + underlying hash function + * multiple bug fixes +- drop nettle-respect-cflags.patch +- silence packaging warning raised by HMAC files + (bsc#1152692, jsc#SLE-9518) + ------------------------------------------------------------------- Tue Oct 1 15:08:36 UTC 2019 - Vítězslav Čížek diff --git a/libnettle.spec b/libnettle.spec index fef24ca..ee64711 100644 --- a/libnettle.spec +++ b/libnettle.spec @@ -1,7 +1,7 @@ # # spec file for package libnettle # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +16,10 @@ # -%define soname 7 -%define hogweed_soname 5 +%define soname 8 +%define hogweed_soname 6 Name: libnettle -Version: 3.5.1 +Version: 3.6 Release: 0 Summary: Cryptographic Library License: LGPL-2.1-or-later AND GPL-2.0-or-later @@ -29,10 +29,9 @@ Source0: https://www.lysator.liu.se/~nisse/archive/nettle-%{version}.tar. Source1: https://www.lysator.liu.se/~nisse/archive/nettle-%{version}.tar.gz.sig Source2: %{name}.keyring Source3: baselibs.conf -# PATCH-FIX-UPSTREAM respect cflags while building -Patch0: nettle-respect-cflags.patch +Source4: %{name}-rpmlintrc BuildRequires: fipscheck -BuildRequires: gmp-devel +BuildRequires: gmp-devel >= 6.1.0 BuildRequires: m4 BuildRequires: makeinfo BuildRequires: pkgconfig @@ -94,14 +93,13 @@ operations using the nettle library. %prep %setup -q -n nettle-%{version} -%patch0 -p1 %build %configure \ --disable-static \ --enable-shared \ --enable-fat -make %{?_smp_mflags} +%make_build %install %make_install @@ -113,7 +111,7 @@ make %{?_smp_mflags} # invalidates a HMAC that may have been created earlier. # solution: create the hashes _after_ the macro runs. # -# this shows up earlier because otherwise the %expand of +# this shows up earlier because otherwise the %%expand of # the macro is too late. # remark: This is the same as running # openssl dgst -sha256 -hmac 'orboDeJITITejsirpADONivirpUkvarP' @@ -133,21 +131,23 @@ make %{?_smp_mflags} %install_info_delete --info-dir="%{_infodir}" "%{_infodir}"/nettle.info%{ext_info} %check -make check %{?_smp_mflags} +%make_build check %files -n libnettle%{soname} %license COPYING* -%doc AUTHORS ChangeLog NEWS README %{_libdir}/libnettle.so.%{soname} %{_libdir}/libnettle.so.%{soname}.* %{_libdir}/.libnettle.so.%{soname}.hmac %files -n libhogweed%{hogweed_soname} +%license COPYING* %{_libdir}/libhogweed.so.%{hogweed_soname} %{_libdir}/libhogweed.so.%{hogweed_soname}.* %{_libdir}/.libhogweed.so.%{hogweed_soname}.hmac %files -n libnettle-devel +%license COPYING* +%doc AUTHORS ChangeLog NEWS README %{_includedir}/nettle %{_libdir}/libnettle.so %{_libdir}/libhogweed.so diff --git a/nettle-3.5.1.tar.gz b/nettle-3.5.1.tar.gz deleted file mode 100644 index 7e09be8..0000000 --- a/nettle-3.5.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:75cca1998761b02e16f2db56da52992aef622bf55a3b45ec538bc2eedadc9419 -size 1989593 diff --git a/nettle-3.5.1.tar.gz.sig b/nettle-3.5.1.tar.gz.sig deleted file mode 100644 index 72eca38158375575a2260611603ed917069f4ecf8313eba100073707a2db0607..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 374 zcmV-+0g3*J0doWZ0SEvc79j*QJTLJ3?q0&}zVn&$S)ceQ#&Vbi0$mhV#Q+Kk5c64| z_$bD5m|oNg{wUo+-{)lWReC|O@4hAfR2d?1g_LAHYOS9C4N_iZ&K?8+FN=@@uB#$dOqsGdczrVs>{yE_kM=Ma)8_G;EJe{332|&#ca)A^Akv|j#(>xw9msxlK0oBYR(azL+_!KmOq=a8O=W9CW z10ZVRMXYx69}yG}D4ZK0Y6Yu{5(O zP)hj!!}D1Ckg1e_OY17V?fN}p1lAgX7PUK@o_?f3&sdo}Ga#|H;L`6T z(O0yDcRIlAXfv;Ojy8n!h*W-^kJH8Q3ewR|fyU-)~(Ssbpsw57QUNbBI z5CpBdDBr7x$V{6a3PCPA^1S{QJn+)Tz4wUq%yQ;100hQ5dg?yT2YFvlrNSi9`r Uudd(;{ig!p$Uf3b