Accepting request 446365 from security:privacy

libgcrypt 1.7.5

OBS-URL: https://build.opensuse.org/request/show/446365
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=89

libgcrypt-1.7.3.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ddac6111077d0a1612247587be238c5294dd0ee4d76dc7ba783cc55fb0337071
-size 2861294

libgcrypt-1.7.5.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d1fea4128beef2bb30a470af6bafabccc503ced350534fb9dd8f5a53ffbae800
+size 2883968

libgcrypt.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Thu Dec 15 10:32:18 UTC 2016 - astieger@suse.com
+
+- libgcrypt 1.7.5:
+  * Fix regression in mlock detection introduced with 1.7.4
+
+-------------------------------------------------------------------
+Tue Dec 13 12:20:47 UTC 2016 - astieger@suse.com
+
+- libgcrypt 1.7.4:
+  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
+    and SHA-1.
+  * Add ARMv8/AArch32 assembly implementation for Twofish and
+    Camellia.
+  * Add bulk processing implementation for ARMv8/AArch32.
+  * Add Stribog OIDs.
+  * Improve the DRBG performance and sync the code with the Linux
+    version.
+  * When secure memory is requested by the MPI functions or by
+    gcry_xmalloc_secure, they do not anymore lead to a fatal error
+    if the secure memory pool is used up.  Instead new pools are
+    allocated as needed.  These new pools are not protected against
+    being swapped out (mlock can't be used). Mitigation for
+    minor confidentiality issues is encryption swap space.
+  * Fix GOST 28147 CryptoPro-B S-box.
+  * Fix error code handling of mlock calls.
+
 -------------------------------------------------------------------
 Sat Aug 20 10:38:15 UTC 2016 - mpluskal,vcizek,astieger}@suse.com
 

libgcrypt.spec

@@ -19,10 +19,9 @@
 %define build_hmac256 1
 %define separate_hmac256_binary 0
 %define libsoname %{name}20
-%define sosuffix  20.1.3
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.7.3
+Version:        1.7.5
 Release:        0
 Summary:        The GNU Crypto Library
 License:        GPL-2.0+ and LGPL-2.1+ and GPL-3.0+