From cce4763633b74c4d8ba01e044898235b4d04be78dd2f97a332244b5a9a252d34 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ismail=20D=C3=B6nmez?= <ismail@i10z.com>
Date: Tue, 8 Sep 2015 17:55:16 +0000
Subject: [PATCH] Accepting request 329637 from
 home:vitezslav_cizek:branches:devel:libraries:c_c++

- update to 1.6.4
- fixes libgcrypt equivalent of CVE-2015-5738 (bsc#944456)
 * Speed up the random number generator by requiring less extra
   seeding.
 * New flag "no-keytest" for ECC key generation.  Due to a bug in the
   parser that flag will also be accepted but ignored by older version
   of Libgcrypt.
 * Always verify a created RSA signature to avoid private key leaks
   due to hardware failures.
 * Other minor bug fixes.

OBS-URL: https://build.opensuse.org/request/show/329637
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=75
---
 libgcrypt-1.6.3.tar.bz2     |   3 ---
 libgcrypt-1.6.3.tar.bz2.sig | Bin 574 -> 0 bytes
 libgcrypt-1.6.4.tar.bz2     |   3 +++
 libgcrypt-1.6.4.tar.bz2.sig | Bin 0 -> 287 bytes
 libgcrypt-sparcv9.diff      |  12 ++++++------
 libgcrypt.changes           |  14 ++++++++++++++
 libgcrypt.spec              |   2 +-
 7 files changed, 24 insertions(+), 10 deletions(-)
 delete mode 100644 libgcrypt-1.6.3.tar.bz2
 delete mode 100644 libgcrypt-1.6.3.tar.bz2.sig
 create mode 100644 libgcrypt-1.6.4.tar.bz2
 create mode 100644 libgcrypt-1.6.4.tar.bz2.sig

diff --git a/libgcrypt-1.6.3.tar.bz2 b/libgcrypt-1.6.3.tar.bz2
deleted file mode 100644
index e28bc46..0000000
--- a/libgcrypt-1.6.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f
-size 2494052
diff --git a/libgcrypt-1.6.3.tar.bz2.sig b/libgcrypt-1.6.3.tar.bz2.sig
deleted file mode 100644
index 5376ca8d5c6175c3eb1e729e560e2471935688284c681641183fdbf1dfe81cf6..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 574
zcmV-E0>S->0UQJX0SEvF1p-v?RQUi32@oWkInqxh<F;Y+2mq7e!+eMBm@qGqQHEdq
zEA@Cf|HumI|EgD9d=DhS62=8*gWb^<bfe-7Q^lTHX&RZ0kPTTA=y_{MFAMM{t9_qs
zHnkGWWxx+>fX*Kpz)>ovI<gSugRsH@Fvrd6@1J!VShn9I@EpU#>mMi+aG$$RQ|fN;
z9C1IfB`Ax(B?<MFyrWbylMc&=dZd#&X2TNje|VomqB(2sX|j84XbaY3CRBx6)GtK!
zwvwyFqdsHdfjRD4u_7?yulZPd2@Fvm+>o3*eFw(#sCwe{+k3X*tyEaD*2+5R!#N2{
z9Y+`8Xj%F#4GgHTLPnCRKq2l=ytLDj`9~2ul*rjFE?S8J90ULX2ml5J0#xvF{{RXJ
z5Fl}|iZi`G1|i7@|9w%k)5cw)l#HEghE382JNnQjKr6eU?F3p7)hc#T!Wp9>f5KFg
zLq<P2aALP@d#gA}FJ<LYI0#0O)ol*^)(km;^Efn?&bfW^7?{l+gF7L92E5Q&Cf}v!
z$)j}Im`}n5AqT@j9CtTihC=Hosy7WFVxx-h(=ALALXV6vWG={nl^cwhVKmGc$!(WD
zEMwamiiLWZAhqowUN|sH#%YFe#kQT{|J(hP|6f2llsX$epT4Lve!nANL2T@6SCUCj
zo~U`fGsq{1|3x|)sOSwi@9>GO5_o)}fW>PXGNcvZY$q!O_{GwpDztgW$YWKFp3()#
MmD8zw8h8T&8?<Ey4gdfE

diff --git a/libgcrypt-1.6.4.tar.bz2 b/libgcrypt-1.6.4.tar.bz2
new file mode 100644
index 0000000..d778ab8
--- /dev/null
+++ b/libgcrypt-1.6.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c9bc2c7fe2e5f4ea13b0c74f9d24bcbb1ad889bb39297d8082aebf23f4336026
+size 2549820
diff --git a/libgcrypt-1.6.4.tar.bz2.sig b/libgcrypt-1.6.4.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..46e189155985c523969387515663844c9013f07afd8f127d4ac92ea89c2cda7c
GIT binary patch
literal 287
zcmV+)0pR|L0UQJX0SEvF1p-y>gyjGV2@oWkInqxh<F>G=2mgO7H0=v4DABu_Oh60L
zPG@LBVgbvtUkRvl=8i-U!Mkp7k60nam`N+^PlOop{kLTWItogcD~_#@@P#y?u=K~m
z6oooNs<xIW{VP<pF?01Kvc64>TF`70X9~NTo)YcDl<EjWUswSZIA|cCy)i2p+v&sd
zW+eDG(i#)p=J`O4T-dP64Saz@2o`cq9urq%>BsTti(DVU3~-d{sNXK6o0cbY`ORW!
z(gc{0pYC%Jj1JjP7w#Z8&KW3t#<qh-?-QnTESpzEbH(p!b2ac*H)~JA&?~PA1bno=
lzRbyLk(y1OP)il?C2PFBbd*Z9)I>Bppo4@?cCr<WAw_&HgAV`z

literal 0
HcmV?d00001

diff --git a/libgcrypt-sparcv9.diff b/libgcrypt-sparcv9.diff
index 3f330f0..8c17717 100644
--- a/libgcrypt-sparcv9.diff
+++ b/libgcrypt-sparcv9.diff
@@ -8,16 +8,16 @@ by choosing v8-like insns for 32-bit v9 mode too.
  mpi/longlong.h |    2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-Index: libgcrypt-1.4.4/mpi/longlong.h
+Index: libgcrypt-1.6.4/mpi/longlong.h
 ===================================================================
---- libgcrypt-1.4.4.orig/mpi/longlong.h
-+++ libgcrypt-1.4.4/mpi/longlong.h
-@@ -1133,7 +1133,7 @@ extern USItype __udiv_qrnnd ();
+--- libgcrypt-1.6.4.orig/mpi/longlong.h	2015-09-07 15:33:48.000000000 +0200
++++ libgcrypt-1.6.4/mpi/longlong.h	2015-09-08 10:36:28.124169828 +0200
+@@ -1287,7 +1287,7 @@ typedef unsigned int UTItype __attribute
  	     "rJ" ((USItype)(al)),                                      \
  	     "rI" ((USItype)(bl))                                       \
  	   __CLOBBER_CC)
--#if defined (__sparc_v8__)
-+#if defined (__sparc_v8__) || defined(__sparc_v9__)
+-#if defined (__sparc_v8__) || defined(__sparcv8)
++#if defined (__sparc_v8__) || defined(__sparcv8) || defined(__sparc_v9__)
  /* Don't match immediate range because, 1) it is not often useful,
     2) the 'I' flag thinks of the range as a 13 bit signed interval,
     while we want to match a 13 bit interval, sign extended to 32 bits,
diff --git a/libgcrypt.changes b/libgcrypt.changes
index df924d8..f7affb0 100644
--- a/libgcrypt.changes
+++ b/libgcrypt.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Sep  8 08:03:19 UTC 2015 - vcizek@suse.com
+
+- update to 1.6.4
+- fixes libgcrypt equivalent of CVE-2015-5738 (bsc#944456)
+ * Speed up the random number generator by requiring less extra
+   seeding.
+ * New flag "no-keytest" for ECC key generation.  Due to a bug in the
+   parser that flag will also be accepted but ignored by older version
+   of Libgcrypt.
+ * Always verify a created RSA signature to avoid private key leaks
+   due to hardware failures.
+ * Other minor bug fixes.
+
 -------------------------------------------------------------------
 Tue Jun 23 15:15:30 UTC 2015 - dvaleev@suse.com
 
diff --git a/libgcrypt.spec b/libgcrypt.spec
index 9dfa001..3ee6506 100644
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -22,7 +22,7 @@
 %define sosuffix  20.0.3
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.6.3
+Version:        1.6.4
 Release:        0
 Summary:        The GNU Crypto Library
 License:        GPL-2.0+ and LGPL-2.1+ and GPL-3.0+