Accepting request 329637 from home:vitezslav_cizek:branches:devel:libraries:c_c++

- update to 1.6.4
- fixes libgcrypt equivalent of CVE-2015-5738 (bsc#944456)
 * Speed up the random number generator by requiring less extra
   seeding.
 * New flag "no-keytest" for ECC key generation.  Due to a bug in the
   parser that flag will also be accepted but ignored by older version
   of Libgcrypt.
 * Always verify a created RSA signature to avoid private key leaks
   due to hardware failures.
 * Other minor bug fixes.

OBS-URL: https://build.opensuse.org/request/show/329637
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=75

libgcrypt-1.6.3.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f
-size 2494052

libgcrypt-1.6.4.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c9bc2c7fe2e5f4ea13b0c74f9d24bcbb1ad889bb39297d8082aebf23f4336026
+size 2549820

libgcrypt-sparcv9.diff

@@ -8,16 +8,16 @@ by choosing v8-like insns for 32-bit v9 mode too.
  mpi/longlong.h |    2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-Index: libgcrypt-1.4.4/mpi/longlong.h
+Index: libgcrypt-1.6.4/mpi/longlong.h
 ===================================================================
---- libgcrypt-1.4.4.orig/mpi/longlong.h
+--- libgcrypt-1.6.4.orig/mpi/longlong.h	2015-09-07 15:33:48.000000000 +0200
-+++ libgcrypt-1.4.4/mpi/longlong.h
++++ libgcrypt-1.6.4/mpi/longlong.h	2015-09-08 10:36:28.124169828 +0200
-@@ -1133,7 +1133,7 @@ extern USItype __udiv_qrnnd ();
+@@ -1287,7 +1287,7 @@ typedef unsigned int UTItype __attribute
  	     "rJ" ((USItype)(al)),                                      \
  	     "rI" ((USItype)(bl))                                       \
  	   __CLOBBER_CC)
--#if defined (__sparc_v8__)
+-#if defined (__sparc_v8__) || defined(__sparcv8)
-+#if defined (__sparc_v8__) || defined(__sparc_v9__)
++#if defined (__sparc_v8__) || defined(__sparcv8) || defined(__sparc_v9__)
  /* Don't match immediate range because, 1) it is not often useful,
     2) the 'I' flag thinks of the range as a 13 bit signed interval,
     while we want to match a 13 bit interval, sign extended to 32 bits,

libgcrypt.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Sep  8 08:03:19 UTC 2015 - vcizek@suse.com
+
+- update to 1.6.4
+- fixes libgcrypt equivalent of CVE-2015-5738 (bsc#944456)
+ * Speed up the random number generator by requiring less extra
+   seeding.
+ * New flag "no-keytest" for ECC key generation.  Due to a bug in the
+   parser that flag will also be accepted but ignored by older version
+   of Libgcrypt.
+ * Always verify a created RSA signature to avoid private key leaks
+   due to hardware failures.
+ * Other minor bug fixes.
+
 -------------------------------------------------------------------
 Tue Jun 23 15:15:30 UTC 2015 - dvaleev@suse.com
 

libgcrypt.spec

@@ -22,7 +22,7 @@
 %define sosuffix  20.0.3
 %define cavs_dir %{_libexecdir}/%{name}/cavs
 Name:           libgcrypt
-Version:        1.6.3
+Version:        1.6.4
 Release:        0
 Summary:        The GNU Crypto Library
 License:        GPL-2.0+ and LGPL-2.1+ and GPL-3.0+