Accepting request 616502 from home:kbabioch:branches:devel:libraries:c_c++

- Update to version 1.8.3:
  - Use blinding for ECDSA signing to mitigate a novel side-channel
    attack. (CVE-2018-0495 bsc#1097410)
  - Fix incorrect counter overflow handling for GCM when using an IV
    size other than 96 bit.
  - Fix incorrect output of AES-keywrap mode for in-place encryption
    on some platforms.
  - Fix the gcry_mpi_ec_curve_point point validation function.
  - Fix rare assertion failure in gcry_prime_check. 
- Applied spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/616502
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=113

libgcrypt-1.8.2.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c8064cae7558144b13ef0eb87093412380efa16c4ee30ad12ecb54886a524c07
-size 2966534

libgcrypt-1.8.3.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c
+size 2989166

libgcrypt.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Jun 13 10:46:33 UTC 2018 - kbabioch@suse.com
+
+- Update to version 1.8.3:
+  - Use blinding for ECDSA signing to mitigate a novel side-channel
+    attack. (CVE-2018-0495 bsc#1097410)
+  - Fix incorrect counter overflow handling for GCM when using an IV
+    size other than 96 bit.
+  - Fix incorrect output of AES-keywrap mode for in-place encryption
+    on some platforms.
+  - Fix the gcry_mpi_ec_curve_point point validation function.
+  - Fix rare assertion failure in gcry_prime_check. 
+- Applied spec-cleaner
+
 -------------------------------------------------------------------
 Wed May  2 14:31:07 UTC 2018 - pmonrealgonzalez@suse.com
 

libgcrypt.spec

@@ -21,12 +21,12 @@
 %define libsoname %{name}20
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.8.2
+Version:        1.8.3
 Release:        0
 Summary:        The GNU Crypto Library
-License:        GPL-2.0+ AND LGPL-2.1+ AND GPL-3.0+
+License:        GPL-2.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-or-later
 Group:          Development/Libraries/C and C++
-Url:            http://directory.fsf.org/wiki/Libgcrypt
+URL:            http://directory.fsf.org/wiki/Libgcrypt
 Source:         ftp://ftp.gnupg.org/gcrypt/libgcrypt/%{name}-%{version}.tar.bz2
 Source1:        ftp://ftp.gnupg.org/gcrypt/libgcrypt/%{name}-%{version}.tar.bz2.sig
 Source2:        baselibs.conf
@@ -73,7 +73,7 @@ understanding of applied cryptography is required to use Libgcrypt.
 
 %package -n %{libsoname}
 Summary:        The GNU Crypto Library
-License:        GPL-2.0+ AND LGPL-2.1+
+License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Group:          System/Libraries
 Suggests:       %{libsoname}-hmac = %{version}-%{release}
 
@@ -83,7 +83,7 @@ GnuPG (alpha version).
 
 %package -n %{libsoname}-hmac
 Summary:        HMAC checksums for the GNU Crypto Library
-License:        GPL-2.0+ AND LGPL-2.1+
+License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Group:          System/Libraries
 Requires:       %{libsoname} = %{version}-%{release}
 
@@ -94,7 +94,7 @@ for integrity checking the library, as required by FIPS 140-2.
 
 %package devel
 Summary:        The GNU Crypto Library
-License:        GFDL-1.1 AND GPL-2.0+ AND LGPL-2.1+ AND MIT
+License:        GFDL-1.1-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT
 Group:          Development/Libraries/C and C++
 Requires:       %{libsoname} = %{version}
 Requires:       glibc-devel
@@ -112,7 +112,7 @@ library.
 
 %package cavs
 Summary:        The GNU Crypto Library
-License:        GFDL-1.1 AND GPL-2.0+ AND LGPL-2.1+ AND MIT
+License:        GFDL-1.1-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT
 Group:          Development/Libraries/C and C++
 Requires:       %{libsoname} = %{version}
 Requires:       %{libsoname}-hmac
@@ -123,7 +123,7 @@ CAVS testing framework for libgcrypt
 %if 0%{?separate_hmac256_binary}
 %package hmac256
 Summary:        The GNU Crypto Library
-License:        GPL-2.0+ AND LGPL-2.1+
+License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Group:          Development/Libraries/C and C++
 Requires:       %{libsoname} = %{version}
 Requires:       libgpg-error-devel
@@ -231,7 +231,7 @@ mv %{buildroot}%{_bindir}/drbg_test %{buildroot}%{cavs_dir}
 %files devel
 %license COPYING COPYING.LIB
 %doc AUTHORS ChangeLog NEWS README THANKS TODO
-%{_infodir}/gcrypt.info%{ext_info}
+%{_infodir}/gcrypt.info*%{ext_info}
 %{_bindir}/dumpsexp
 %{_bindir}/mpicalc
 %{_bindir}/%{name}-config