Accepting request 1289185 from security:tls

OBS-URL: https://build.opensuse.org/request/show/1289185
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libnettle?expand=0&rev=52

libnettle.changes

@@ -1,3 +1,52 @@
+-------------------------------------------------------------------
+Sun Jun 29 16:54:59 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 3.10.2:
+  * Fix missing prototypes in getopt.h and getopt.c
+  * For powerpc64, avoid using v9 (ISA v3.0) instructions lxvb16x,
+    lxv and stxv in powerpc64/p8/ files.
+  * For powerpc64, add configure check for __VSX__, and disable
+    use of assembly if not defined. Nettle's powerpc64 assembly
+    requires at least v7 (ISA v2.06)
+- drop libnettle-powerpc64-skip-AES-GCM-test.patch
+
+-------------------------------------------------------------------
+Thu Jan  9 15:39:31 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Disable the gcm regression test as it fails in virtual
+  environments for the ppc64le architecture.
+  * Add libnettle-powerpc64-skip-AES-GCM-test.patch
+
+-------------------------------------------------------------------
+Thu Jan  2 08:34:18 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to nettle 3.10.1:
+  * Bug fixes:
+    - Fix buffer overread in the new sha256 assembly for
+      powerpc64, as well as a stack alignment issue.
+    - Added missing nettle_mac structs for hmac-gosthash.
+    - Fix configure test for valgrind, to not attempt to run
+      valgrind on executables built using memory sanitizers.
+  * Enable back the gcm regression test:
+    - Remove libnettle-powerpc64-skip-AES-GCM-test.patch
+  * Remove patches upstream:
+    - libnettle-powerpc64-sha256-fix-loading-overreads.patch
+    - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
+    - libnettle-powerpc64-remove-m4_unquote-sha256.patch
+
+-------------------------------------------------------------------
+Tue Dec  3 08:07:16 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- ppcl64le: POWER10 performance enhancements for cryptography [jsc#PED-9904]
+  * powerpc64/sha256: fix loading overreads by loading less and shifting
+  * powerpc64/sha256: adjust stack offset for storing non-volatile registers
+  * powerpc64: remove use of m4_unquote in the load step for sha256
+  * Temporarily skip the gcm test: libnettle-powerpc64-skip-AES-GCM-test.patch
+  * Add patches:
+    - libnettle-powerpc64-sha256-fix-loading-overreads.patch
+    - libnettle-powerpc64-sha256-adjust-stack-offset-for-non-volatile-registers.patch
+    - libnettle-powerpc64-remove-m4_unquote-sha256.patch
+
 -------------------------------------------------------------------
 Mon Jun 17 06:22:31 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
 

libnettle.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package libnettle
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +20,7 @@
 %define soname 8
 %define hogweed_soname 6
 Name:           libnettle
-Version:        3.10
+Version:        3.10.2
 Release:        0
 Summary:        Cryptographic Library
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
@@ -30,7 +31,6 @@ Source1:        https://ftp.gnu.org/gnu/nettle/nettle-%{version}.tar.gz.sig
 Source2:        %{name}.keyring
 Source3:        baselibs.conf
 Source4:        %{name}-rpmlintrc
-BuildRequires:  autoconf
 BuildRequires:  fipscheck
 BuildRequires:  gmp-devel >= 6.1.0
 BuildRequires:  m4
@@ -96,7 +96,6 @@ operations using the nettle library.
 %autosetup -p1 -n nettle-%{version}
 
 %build
-autoreconf -fiv
 %configure \
     --disable-static \
     --enable-shared \
@@ -134,10 +133,8 @@ done
 %{_bindir}/fipshmac %{buildroot}%{_libdir}/libhogweed.so.%{hogweed_soname}
 }}
 
-%post   -n libnettle%{soname} -p /sbin/ldconfig
-%postun -n libnettle%{soname} -p /sbin/ldconfig
-%post   -n libhogweed%{hogweed_soname} -p /sbin/ldconfig
-%postun -n libhogweed%{hogweed_soname} -p /sbin/ldconfig
+%ldconfig_scriptlets -n libnettle%{soname}
+%ldconfig_scriptlets -n libhogweed%{hogweed_soname}
 
 %check
 %make_build check

nettle-3.10.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5
+size 2644644