From 03a62088d9a8d5501f00b4bf28fa4da1c6a4f442 Mon Sep 17 00:00:00 2001 From: "Carlos J. Puga Medina" Date: Wed, 13 Jun 2018 18:59:05 +0000 Subject: [PATCH] security/libgcrypt: Update to 1.8.3 (bugfix) - Improve comment in Makefile - Provide more elaborate port description and update WWW in pkg-descr Noteworthy changes in version 1.8.3 =================================== - Use blinding for ECDSA signing to mitigate a novel side-channel attack. [#4011,CVE-2018-0495] - Fix incorrect counter overflow handling for GCM when using an IV size other than 96 bit. [#3764] - Fix incorrect output of AES-keywrap mode for in-place encryption on some platforms. - Fix the gcry_mpi_ec_curve_point point validation function. - Fix rare assertion failure in gcry_prime_check. Release info at . For further details, see https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html MFH: 2018Q2 Security: http://vuxml.freebsd.org/freebsd/9b5162de-6f39-11e8-818e-e8e0b747a45a.html --- security/libgcrypt/Makefile | 4 ++-- security/libgcrypt/distinfo | 6 +++--- security/libgcrypt/pkg-descr | 9 +++++++-- security/libgcrypt/pkg-plist | 2 +- 4 files changed, 13 insertions(+), 8 deletions(-) diff --git a/security/libgcrypt/Makefile b/security/libgcrypt/Makefile index 7c4f0c11241d..53ef2ff87d2b 100644 --- a/security/libgcrypt/Makefile +++ b/security/libgcrypt/Makefile @@ -1,12 +1,12 @@ # $FreeBSD$ PORTNAME= libgcrypt -PORTVERSION= 1.8.2 +PORTVERSION= 1.8.3 CATEGORIES= security MASTER_SITES= GNUPG MAINTAINER= cpm@FreeBSD.org -COMMENT= General purpose crypto library based on code used in GnuPG +COMMENT= General purpose cryptographic library based on the code from GnuPG LICENSE= GPLv2+ LGPL21+ LICENSE_COMB= multi diff --git a/security/libgcrypt/distinfo b/security/libgcrypt/distinfo index db5c3a11ef4f..505c22f0f352 100644 --- a/security/libgcrypt/distinfo +++ b/security/libgcrypt/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1513371062 -SHA256 (libgcrypt-1.8.2.tar.bz2) = c8064cae7558144b13ef0eb87093412380efa16c4ee30ad12ecb54886a524c07 -SIZE (libgcrypt-1.8.2.tar.bz2) = 2966534 +TIMESTAMP = 1528899391 +SHA256 (libgcrypt-1.8.3.tar.bz2) = 66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c +SIZE (libgcrypt-1.8.3.tar.bz2) = 2989166 diff --git a/security/libgcrypt/pkg-descr b/security/libgcrypt/pkg-descr index 7d4bd22a0f46..0150ccb86f2a 100644 --- a/security/libgcrypt/pkg-descr +++ b/security/libgcrypt/pkg-descr @@ -1,3 +1,8 @@ -Libgcrypt is a general purpose crypto library based on the code used in GnuPG. +Libgcrypt is a general purpose cryptographic library based on the code from +GnuPG. -WWW: https://www.gnupg.org/ +It provides functions for all cryptographic building blocks: symmetric ciphers, +hash algorithms, MACs, public key algorithms, large integer functions, +random numbers and a lot of supporting functions. + +WWW: https://www.gnupg.org/software/libgcrypt/index.html diff --git a/security/libgcrypt/pkg-plist b/security/libgcrypt/pkg-plist index 786383ffd3e8..73293063c0b3 100644 --- a/security/libgcrypt/pkg-plist +++ b/security/libgcrypt/pkg-plist @@ -6,6 +6,6 @@ include/gcrypt.h lib/libgcrypt.a lib/libgcrypt.so lib/libgcrypt.so.20 -lib/libgcrypt.so.20.2.2 +lib/libgcrypt.so.20.2.3 man/man1/hmac256.1.gz share/aclocal/libgcrypt.m4