New upstream release, security fix for two side channel attacks: CVE-2014-3591,CVE-2015-0837

Package-Manager: portage-2.2.14/cvs/Linux x86_64
Manifest-Sign-Key: 0xFED5002857C1ABFA!

3 files changed, 78 insertions, 6 deletions

diff --git a/dev-libs/libgcrypt/ChangeLog b/dev-libs/libgcrypt/ChangeLog
index 40b7e4d32331..2ff5c270ae9d 100644
--- a/dev-libs/libgcrypt/ChangeLog
+++ b/dev-libs/libgcrypt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for dev-libs/libgcrypt
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/libgcrypt/ChangeLog,v 1.228 2015/01/15 11:36:12 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libgcrypt/ChangeLog,v 1.229 2015/02/27 21:25:29 k_f Exp $
+
+*libgcrypt-1.6.3 (27 Feb 2015)
+
+  27 Feb 2015; Kristian Fiskerstrand <k_f@gentoo.org> +libgcrypt-1.6.3.ebuild:
+  New upstream release, security fix for two side channel attacks:
+  CVE-2014-3591,CVE-2015-0837
 
   15 Jan 2015; Raúl Porcel <armin76@gentoo.org> libgcrypt-1.5.4-r1.ebuild:
   alpha/ia64/sparc stable wrt #524308
diff --git a/dev-libs/libgcrypt/Manifest b/dev-libs/libgcrypt/Manifest
index a86db5190be6..701d17d77990 100644
--- a/dev-libs/libgcrypt/Manifest
+++ b/dev-libs/libgcrypt/Manifest
@@ -9,17 +9,22 @@ AUX libgcrypt-multilib-syspath.patch 588 SHA256 a3fc53f24b9cd0355a5267bc3ca8e88c
 DIST libgcrypt-1.5.4.tar.bz2 1512982 SHA256 d5f88d9f41a46953dc250cdb8575129b37ee2208401b7fa338c897f667c7fb33 SHA512 fe7e1d07eb10ee4ea8054bc955c35dc4b2109db645a08a6fa7757bf1e77a612e03c0838f9766086f04270b3621f34ccae0d6333f117cff204ccad9018c8a7908 WHIRLPOOL 221082d028a90235a3ddcc774b1772a8b8daec989a24b341491849e653e2ecb5cb0e3c8989a3f426524e39b28ebbe1b48532d5d9de7c54f4bdc19b450e22e4dc
 DIST libgcrypt-1.6.1.tar.bz2 2470885 SHA256 a1c3efea69f8ffe769f488b300ce190eeeb0c30de24a53f1c1b6e4202fdc2070 SHA512 83d502cf998736a5920df7324b7ff658041c34b2cfddccd8b96744ff940c0c84fe91fe7bfe03a69b10b9697a6f04f3007134bbc3c288b0fed78b60fc6ff15bc2 WHIRLPOOL 693de77590ea2da423e43e832f809183a50fa0e5d02d2fe46b860c6e6295d879730a300353d71e63671f498a1041b7b072af6bf4124a1a45eda787fee636a248
 DIST libgcrypt-1.6.2.tar.bz2 2476101 SHA256 de084492a6b38cdb27b67eaf749ceba76bf7029f63a9c0c3c1b05c88c9885c4c SHA512 86003bb61c1fd37d0e54f9b1f48a9d89adb5f623818f67392f19d0de9b28ccb911a728238f8a8d23b875afb3bf7698bbea4da7b3b3a10e049311b9b45fabe472 WHIRLPOOL e25f1035f57c182d8c5e3b608698b97cfc51472d2d39763d9d29abf0af88c751615f6d6b4ed9840fc8e9c055929cd51909c2dca01bc2ac7b37bbc0d4a09dfd29
+DIST libgcrypt-1.6.3.tar.bz2 2494052 SHA256 41b4917b93ae34c6a0e2127378d7a4d66d805a2a86a09911d4f9bd871db7025f SHA512 09a84fcc4d3d755df21f46302a549af4ba788d829ff7fa0cf65eeec033bc3744503f8fe3f4be55a51cc17b1b1b487736c328d7d7bc909f13139600236298c549 WHIRLPOOL dd331afed5c8116df8a55742a7b559791c554a97c32983d64ab196a6d47c2d6bd7e15f8a63dda43947961bb269963185b98927ff0695c3f6d3b939face41e450
 EBUILD libgcrypt-1.5.4-r1.ebuild 1824 SHA256 34f9b7cd4c3e228edf6cf7ca002ffdb806fe74b7566d4d8b1ab73bddd1c28d5d SHA512 3b6bc09bb7e4dc6544e5585e29bb8e57db6194d4ad848bd690a5a20d29d4c12d08385c4f42ad6ec65928a0828d3aee4a49c01325f7fc486f29610e6ec58185f7 WHIRLPOOL 370894ebd2d08df6bae3a7f3a9b6f67cf51b66504c21dc453a87356ac628fb3e4bfa080c53ff79a60dcfd837d68fae93564c06e01f2f075d6aa35ca80a52f4c6
 EBUILD libgcrypt-1.5.4-r100.ebuild 1850 SHA256 ade10fcf9efb4b48f748dc24d6ecf6255ab92d3a635e96d659f94420d9fac362 SHA512 40f02e860d3e9e4fc88c9dcb329c32376fa748615615d8a1056260def2e6d8ab801e19f5a14eee5f7c1dc2ed42fb1fadb88264b70d883d64f98ee99e7e753c83 WHIRLPOOL 463fd2758436632f7a2e9bcfeb307c6e7f841468adbd84d38845a03297955d46ba37f9f84b0035071ad5dccb011511ca611100c85fa72d2f53074347c373629d
 EBUILD libgcrypt-1.5.4.ebuild 1589 SHA256 2081786054cf1b5ebaf5488de019ed88421620ddb78f7ddd807c9c60a2653b21 SHA512 05074db47b5cae00a07d77e0bba4c418bf8eb4cdc1444389a4e7853cbb8ac2757875c5f8bca3e393f4937721b1d734d2f7dbf29add1211957cbb3f2e04a76b92 WHIRLPOOL 67f0967a9ec8bf63805c4c5ab9e4ee186bedd47cb4c38c1f6fbdcd010f528ab32faf3abaad2ab167b6339a45e2ea0ae35cc0e9b99ea6582e2117839b8f0cb15b
 EBUILD libgcrypt-1.6.1-r2.ebuild 2188 SHA256 207447da3831f69f3d0caa0acfe929589543f1ba3d520ecf4f21147ff9e41885 SHA512 20e173e86f5f1fa7e86b9f4878ec1f159ab790aa9494f63e46c2ecc2d8215c4d086a728bc1ada47d6913f7f48532c6c978a4283c67b835b74950929c35a461ce WHIRLPOOL 99aba5a6c17061cc64b093c27e4a7f46b592c03daeac42182a0421dcf36915fca773a6fe9e62f0179bf8a72ef01136002377015f6680850c091baba31bedfde4
 EBUILD libgcrypt-1.6.2.ebuild 2145 SHA256 048b090e98e3840de8445a8ed8e5e55839cc06647b3ac7bc7d8fb2afc9317451 SHA512 9650d4bfe00ce214c66b5db78fca2396e6dcae4e8646b9438b55fe4bc0695454ed99d4d5e40bbfc9301e6e91fe8ead37c153929423f3a9756da7ab9e6030afb6 WHIRLPOOL 58c37f620b201fcc5d03b2921dfb51be6024f4766996afcd32a01d40351043e147009b5949ca6a289fc87df4063896586e2f9f80693f277e0071389918ae6968
-MISC ChangeLog 33091 SHA256 c0b631ba25fdcebaecfae134031565a9dfc6bf0a613b6ff792152fec9028fb32 SHA512 da5944b249fc24edd1b246f2a86e81ac271a45b6da6135fbee0ea50edcdc6c316f886fa3755adcf3d14b250b5023f8a0baa11109e5bc6f20cad62e44ca2977c3 WHIRLPOOL c0a01e665dfdc52e0563321afe917b2bc560f78ddfe6bf486386d5f143597fd89efc83c0dfcdcf14af52ed3de7c7da76636ed5507cbdf2775a586e1b9271a1d8
+EBUILD libgcrypt-1.6.3.ebuild 2099 SHA256 ce1f674e5519885a5bb7a9612bd5b1c51a06f4b9a9632b24eb69a6c4be45c72d SHA512 4b6ff6a62361bb0bb87594e89fe54f67ff6466007c7dc4a34d185d2c68804658a40fa11bf5ae18f3332ec970fe9345873e22f16a1163ebdff708f7b971ec9772 WHIRLPOOL 94050b09f68e8abc7213ebf8814b3c12c85675ab84eaf9b3e32e0b58b4bb2627b199a46d2f704f162abeedc087e7c782a581900bdb795518fff3e99f1384b875
+MISC ChangeLog 33296 SHA256 1a456e078bdd8148576cd01aa0c588e826d139da69015702b62150ee2eddb422 SHA512 f58c2c6d128605a710c6b372401660ac63361584596773b226e2e89b1c068e802f0c44479f6ac5f4c98fc4e1c41a7d3020f7c049ef36e93435f29dbe6b46b70c WHIRLPOOL fb07f13cf9b6e2fd846b1ca238a16b97fe20a795a7c83dfbd032c9e09a2b2f0f2012ce01a275ce40a4e970d9695781fe4b42bbf0d0f8b87dc855dbda33663f6c
 MISC metadata.xml 400 SHA256 ce8390ef2caf4820941fa6ab4d87a2f6d9c2823b42d845b3a5da9fa7586e63d3 SHA512 8c527cc5701fbc96dfd9c6006de8edeb5a48b8b56bb4f7b4fdbaaea159ba3e05252cd0b378085b3fedacd8352cfc2417948e4a852c32c2ae2bfd5c9b85c8bf62 WHIRLPOOL 3b5e66406ebbfb1a9f7cadccf6241ef4867f7b25513f2ef49ef02e2980b7201085752f1643a0132e98750f230ee56b5e7c786d1e6eafa51e98c5f8c04d95ba96
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2
 
-iEYEAREIAAYFAlS3pi0ACgkQuQc30/atMkBlIwCcCmB/w/T4THjEGRVuZT3qjpvb
-QdsAn2x1lpwEf1gBC/qPb/hyN4XIwobX
-=KjEq
+iQEcBAEBCAAGBQJU8ODKAAoJEP7VAChXwav60HkH/ilIPS8ZHwXvH9hrIuWh6cUp
+Pty/wZW5qA8TA2Xs7URNvkICoAZmdGMuM4nch1KJVHVfozWlXY3tATvC70Zb5E3I
+7UKyEi2PS5Z32bPscoy0UPUNsEhNAVLnm8qNlRaNTqEBhil54Ct8jrN72bKKNr5o
+tHh6O45wkihE23u4xe/bV8khFvymqmZ8LVr+hoVgADcMktZMH61xstN728an7LUg
+gFJ5ixNKGxVi2pebyJ8P9UBKRZcJS/w79HaknYWpF/avVpwcObCEC0/H3oF3fHKE
+vrciNTlasFTX339UDEnuxBAbQqn4XgEMjrFZOKtIgLVuuIJJ1Lf1wb1srYX1BrI=
+=C2fF
 -----END PGP SIGNATURE-----
diff --git a/dev-libs/libgcrypt/libgcrypt-1.6.3.ebuild b/dev-libs/libgcrypt/libgcrypt-1.6.3.ebuild
new file mode 100644
index 000000000000..43af44bbf963
--- /dev/null
+++ b/dev-libs/libgcrypt/libgcrypt-1.6.3.ebuild
@@ -0,0 +1,61 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/libgcrypt/libgcrypt-1.6.3.ebuild,v 1.1 2015/02/27 21:25:29 k_f Exp $
+
+EAPI=5
+AUTOTOOLS_AUTORECONF=1
+
+inherit autotools-multilib flag-o-matic
+
+DESCRIPTION="General purpose crypto library based on the code used in GnuPG"
+HOMEPAGE="http://www.gnupg.org/"
+SRC_URI="mirror://gnupg/${PN}/${P}.tar.bz2"
+
+LICENSE="LGPL-2.1 MIT"
+SLOT="0/20" # subslot = soname major version
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~x86-freebsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris"
+IUSE="static-libs"
+
+RDEPEND=">=dev-libs/libgpg-error-1.12[${MULTILIB_USEDEP}]
+	abi_x86_32? (
+		!<=app-emulation/emul-linux-x86-baselibs-20131008-r19
+		!app-emulation/emul-linux-x86-baselibs[-abi_x86_32]
+	)"
+DEPEND="${RDEPEND}"
+
+DOCS=( AUTHORS ChangeLog NEWS README THANKS TODO )
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-1.6.1-uscore.patch
+	"${FILESDIR}"/${PN}-multilib-syspath.patch
+)
+
+MULTILIB_CHOST_TOOLS=(
+	/usr/bin/libgcrypt-config
+)
+
+multilib_src_configure() {
+	if [[ ${CHOST} == *86*-solaris* ]] ; then
+		# ASM code uses GNU ELF syntax, divide in particular, we need to
+		# allow this via ASFLAGS, since we don't have a flag-o-matic
+		# function for that, we'll have to abuse cflags for this
+		append-cflags -Wa,--divide
+	fi
+	local myeconfargs=(
+		--disable-padlock-support # bug 201917
+		--disable-dependency-tracking
+		--enable-noexecstack
+		--disable-O-flag-munging
+		$(use_enable static-libs static)
+
+		# disabled due to various applications requiring privileges
+		# after libgcrypt drops them (bug #468616)
+		--without-capabilities
+
+		# http://trac.videolan.org/vlc/ticket/620
+		# causes bus-errors on sparc64-solaris
+		$([[ ${CHOST} == *86*-darwin* ]] && echo "--disable-asm")
+		$([[ ${CHOST} == sparcv9-*-solaris* ]] && echo "--disable-asm")
+	)
+	autotools-utils_src_configure
+}