Hello community, here is the log from the commit of package libnettle for openSUSE:Factory checked in at 2016-02-07 09:22:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libnettle (Old) and /work/SRC/openSUSE:Factory/.libnettle.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libnettle" Changes: -------- --- /work/SRC/openSUSE:Factory/libnettle/libnettle.changes 2015-07-05 17:53:36.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.libnettle.new/libnettle.changes 2016-02-07 09:22:46.000000000 +0100 @@ -1,0 +2,15 @@ +Thu Jan 28 20:45:45 UTC 2016 - tchva...@suse.com + +- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847 + CVE-2015-8804 bnc#964845 CVE-2015-8803: + * New functions for RSA private key operations, identified by + the "_tr" suffix, with better resistance to side channel + attacks and to hardware or software failures which could + break the CRT optimization + * SHA3 implementation is updated according to the FIPS 202 standard + * New ARM Neon implementation of the chacha stream cipher + * Should be compatible binary with 3.1 series +- Add patch to fix build with cflags: + * nettle-respect-cflags.patch + +------------------------------------------------------------------- Old: ---- nettle-3.1.1.tar.gz nettle-3.1.1.tar.gz.sig New: ---- nettle-3.2.tar.gz nettle-3.2.tar.gz.sig nettle-respect-cflags.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libnettle.spec ++++++ --- /var/tmp/diff_new_pack.dV4Vrh/_old 2016-02-07 09:22:47.000000000 +0100 +++ /var/tmp/diff_new_pack.dV4Vrh/_new 2016-02-07 09:22:47.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package libnettle # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %define soname 6 %define hogweed_soname 4 Name: libnettle -Version: 3.1.1 +Version: 3.2 Release: 0 Summary: Cryptographic Library License: LGPL-2.1+ and GPL-2.0+ @@ -29,6 +29,8 @@ Source1: https://ftp.gnu.org/gnu/nettle/nettle-%{version}.tar.gz.sig Source2: %{name}.keyring Source3: baselibs.conf +# PATCH-FIX-UPSTREAM respect cflags while building +Patch0: nettle-respect-cflags.patch BuildRequires: gmp-devel BuildRequires: makeinfo BuildRequires: pkgconfig @@ -91,6 +93,7 @@ %prep %setup -q -n nettle-%{version} +%patch0 -p1 %build %configure \ ++++++ nettle-3.1.1.tar.gz -> nettle-3.2.tar.gz ++++++ ++++ 8035 lines of diff (skipped) ++++++ nettle-respect-cflags.patch ++++++ Index: nettle-3.2/Makefile.in =================================================================== --- nettle-3.2.orig/Makefile.in +++ nettle-3.2/Makefile.in @@ -278,27 +278,27 @@ $(LIBHOGWEED_FORLINK): $(hogweed_OBJS) $ # executable. Avoid object file targets to make it easy to run the # right compiler. aesdata$(EXEEXT_FOR_BUILD): aesdata.c - $(CC_FOR_BUILD) `test -f aesdata.c || echo '$(srcdir)/'`aesdata.c \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f aesdata.c || echo '$(srcdir)/'`aesdata.c \ -o aesdata$(EXEEXT_FOR_BUILD) desdata$(EXEEXT_FOR_BUILD): desdata.c - $(CC_FOR_BUILD) `test -f desdata.c || echo '$(srcdir)/'`desdata.c \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f desdata.c || echo '$(srcdir)/'`desdata.c \ -o desdata$(EXEEXT_FOR_BUILD) twofishdata$(EXEEXT_FOR_BUILD): twofishdata.c - $(CC_FOR_BUILD) `test -f twofishdata.c || echo '$(srcdir)/'`twofishdata.c \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f twofishdata.c || echo '$(srcdir)/'`twofishdata.c \ -o twofishdata$(EXEEXT_FOR_BUILD) shadata$(EXEEXT_FOR_BUILD): shadata.c - $(CC_FOR_BUILD) `test -f shadata.c || echo '$(srcdir)/'`shadata.c -lm \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f shadata.c || echo '$(srcdir)/'`shadata.c -lm \ -o shadata$(EXEEXT_FOR_BUILD) gcmdata$(EXEEXT_FOR_BUILD): gcmdata.c - $(CC_FOR_BUILD) `test -f gcmdata.c || echo '$(srcdir)/'`gcmdata.c \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f gcmdata.c || echo '$(srcdir)/'`gcmdata.c \ -o gcmdata$(EXEEXT_FOR_BUILD) eccdata$(EXEEXT_FOR_BUILD): eccdata.c mini-gmp.c mini-gmp.h - $(CC_FOR_BUILD) `test -f eccdata.c || echo '$(srcdir)/'`eccdata.c \ + $(CC_FOR_BUILD) $(CFLAGS) `test -f eccdata.c || echo '$(srcdir)/'`eccdata.c \ -o eccdata$(EXEEXT_FOR_BUILD) # desCore rules
