[arch-commits] Commit in crypto++/repos (10 files)
Allan McRae
allan at archlinux.org
Fri Jul 24 11:59:02 UTC 2015
Date: Friday, July 24, 2015 @ 13:59:01
Author: allan
Revision: 242479
archrelease: copy trunk to extra-i686, extra-x86_64
Added:
crypto++/repos/extra-i686/CVE-2015-2141.patch
(from rev 242478, crypto++/trunk/CVE-2015-2141.patch)
crypto++/repos/extra-i686/PKGBUILD
(from rev 242478, crypto++/trunk/PKGBUILD)
crypto++/repos/extra-i686/libcrypto++.pc
(from rev 242478, crypto++/trunk/libcrypto++.pc)
crypto++/repos/extra-x86_64/CVE-2015-2141.patch
(from rev 242478, crypto++/trunk/CVE-2015-2141.patch)
crypto++/repos/extra-x86_64/PKGBUILD
(from rev 242478, crypto++/trunk/PKGBUILD)
crypto++/repos/extra-x86_64/libcrypto++.pc
(from rev 242478, crypto++/trunk/libcrypto++.pc)
Deleted:
crypto++/repos/extra-i686/PKGBUILD
crypto++/repos/extra-i686/libcrypto++.pc
crypto++/repos/extra-x86_64/PKGBUILD
crypto++/repos/extra-x86_64/libcrypto++.pc
----------------------------------+
/PKGBUILD | 84 +++++++++++++++++++++++++++++++++++++
/libcrypto++.pc | 22 +++++++++
extra-i686/CVE-2015-2141.patch | 32 ++++++++++++++
extra-i686/PKGBUILD | 36 ---------------
extra-i686/libcrypto++.pc | 11 ----
extra-x86_64/CVE-2015-2141.patch | 32 ++++++++++++++
extra-x86_64/PKGBUILD | 36 ---------------
extra-x86_64/libcrypto++.pc | 11 ----
8 files changed, 170 insertions(+), 94 deletions(-)
Copied: crypto++/repos/extra-i686/CVE-2015-2141.patch (from rev 242478, crypto++/trunk/CVE-2015-2141.patch)
===================================================================
--- extra-i686/CVE-2015-2141.patch (rev 0)
+++ extra-i686/CVE-2015-2141.patch 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,32 @@
+From 9425e16437439e68c7d96abef922167d68fafaff Mon Sep 17 00:00:00 2001
+From: Jeffrey Walton <noloader at gmail.com>
+Date: Sat, 27 Jun 2015 17:56:01 -0400
+Subject: [PATCH] Fix for CVE-2015-2141. Thanks to Evgeny Sidorov for
+ reporting. Squaring to satisfy Jacobi requirements suggested by JPM.
+
+---
+ rw.cpp | 8 +++++++-
+ 1 file changed, 7 insertions(+), 1 deletion(-)
+
+diff --git a/rw.cpp b/rw.cpp
+index cdd9f2d..0b9318b 100644
+--- a/rw.cpp
++++ b/rw.cpp
+@@ -126,10 +126,16 @@ Integer InvertibleRWFunction::CalculateInverse(RandomNumberGenerator &rng, const
+ DoQuickSanityCheck();
+ ModularArithmetic modn(m_n);
+ Integer r, rInv;
+- do { // do this in a loop for people using small numbers for testing
++
++ // do this in a loop for people using small numbers for testing
++ do {
+ r.Randomize(rng, Integer::One(), m_n - Integer::One());
++ // Fix for CVE-2015-2141. Thanks to Evgeny Sidorov for reporting.
++ // Squaring to satisfy Jacobi requirements suggested by JPM.
++ r = modn.Square(r);
+ rInv = modn.MultiplicativeInverse(r);
+ } while (rInv.IsZero());
++
+ Integer re = modn.Square(r);
+ re = modn.Multiply(re, x); // blind
+
Deleted: extra-i686/PKGBUILD
===================================================================
--- extra-i686/PKGBUILD 2015-07-24 11:57:33 UTC (rev 242478)
+++ extra-i686/PKGBUILD 2015-07-24 11:59:01 UTC (rev 242479)
@@ -1,36 +0,0 @@
-# $Id$
-# Maintainer: Giovanni Scafora <giovanni at archlinux.org>
-# Contributor: Alexander Rødseth <rodseth at gmail.com>
-# Contributor: Andrea Scarpino <andrea at archlinux.org>
-# Contributor: Kritoke <kritoke at gamebox.net>
-# Contributor: jlvsimoes <jlvsimoes at oninet.pt>
-
-pkgname=crypto++
-pkgver=5.6.2
-_srcver=562
-pkgrel=2
-pkgdesc="A free C++ class library of cryptographic schemes"
-arch=('i686' 'x86_64')
-url="http://www.cryptopp.com/"
-license=('custom')
-depends=('gcc-libs')
-makedepends=('unzip')
-source=("http://www.cryptopp.com/cryptopp${_srcver}.zip"
- 'libcrypto++.pc')
-md5sums=('7ed022585698df48e65ce9218f6c6a67'
- '46de3847c59ad16456fa863eb33e73b2')
-
-build() {
- sed -i -e 's/^CXXFLAGS/#CXXFLAGS/' GNUmakefile
- export CXXFLAGS="${CXXFLAGS} -DNDEBUG -fPIC"
- make -f GNUmakefile
- make libcryptopp.so
-}
-
-package() {
- install -d ${pkgdir}/usr/{lib/pkgconfig,include/cryptopp}
- install -m644 *.h ${pkgdir}/usr/include/cryptopp/
- install -m644 libcryptopp.so "${pkgdir}/usr/lib/libcryptopp.so"
- install -m644 ${srcdir}/libcrypto++.pc "${pkgdir}/usr/lib/pkgconfig/libcrypto++.pc"
- install -D -m644 License.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
-}
Copied: crypto++/repos/extra-i686/PKGBUILD (from rev 242478, crypto++/trunk/PKGBUILD)
===================================================================
--- extra-i686/PKGBUILD (rev 0)
+++ extra-i686/PKGBUILD 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,42 @@
+# $Id$
+# Maintainer: Giovanni Scafora <giovanni at archlinux.org>
+# Contributor: Alexander Rødseth <rodseth at gmail.com>
+# Contributor: Andrea Scarpino <andrea at archlinux.org>
+# Contributor: Kritoke <kritoke at gamebox.net>
+# Contributor: jlvsimoes <jlvsimoes at oninet.pt>
+
+pkgname=crypto++
+pkgver=5.6.2
+_srcver=562
+pkgrel=3
+pkgdesc="A free C++ class library of cryptographic schemes"
+arch=('i686' 'x86_64')
+url="http://www.cryptopp.com/"
+license=('custom')
+depends=('gcc-libs')
+makedepends=('unzip')
+source=("http://www.cryptopp.com/cryptopp${_srcver}.zip"
+ 'CVE-2015-2141.patch'
+ 'libcrypto++.pc')
+md5sums=('7ed022585698df48e65ce9218f6c6a67'
+ '7ff9a215b9244b4f8a17c7185e27beda'
+ '46de3847c59ad16456fa863eb33e73b2')
+
+prepare() {
+ patch -p1 -i ${srcdir}/CVE-2015-2141.patch
+}
+
+build() {
+ sed -i -e 's/^CXXFLAGS/#CXXFLAGS/' GNUmakefile
+ export CXXFLAGS="${CXXFLAGS} -DNDEBUG -fPIC"
+ make -f GNUmakefile
+ make libcryptopp.so
+}
+
+package() {
+ install -d ${pkgdir}/usr/{lib/pkgconfig,include/cryptopp}
+ install -m644 *.h ${pkgdir}/usr/include/cryptopp/
+ install -m644 libcryptopp.so "${pkgdir}/usr/lib/libcryptopp.so"
+ install -m644 ${srcdir}/libcrypto++.pc "${pkgdir}/usr/lib/pkgconfig/libcrypto++.pc"
+ install -D -m644 License.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
+}
Deleted: extra-i686/libcrypto++.pc
===================================================================
--- extra-i686/libcrypto++.pc 2015-07-24 11:57:33 UTC (rev 242478)
+++ extra-i686/libcrypto++.pc 2015-07-24 11:59:01 UTC (rev 242479)
@@ -1,11 +0,0 @@
-# Written by Alexander Rødseth <rodseth at gmail.com>
-
-prefix=/usr
-libdir=${prefix}/lib
-includedir=${prefix}/include
-
-Name: libcrypto++-5.6.2
-Description: Class library of cryptographic schemes
-Version: 5.6.2
-Libs: -L${libdir} -lcryptopp
-Cflags: -I${includedir}
Copied: crypto++/repos/extra-i686/libcrypto++.pc (from rev 242478, crypto++/trunk/libcrypto++.pc)
===================================================================
--- extra-i686/libcrypto++.pc (rev 0)
+++ extra-i686/libcrypto++.pc 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,11 @@
+# Written by Alexander Rødseth <rodseth at gmail.com>
+
+prefix=/usr
+libdir=${prefix}/lib
+includedir=${prefix}/include
+
+Name: libcrypto++-5.6.2
+Description: Class library of cryptographic schemes
+Version: 5.6.2
+Libs: -L${libdir} -lcryptopp
+Cflags: -I${includedir}
Copied: crypto++/repos/extra-x86_64/CVE-2015-2141.patch (from rev 242478, crypto++/trunk/CVE-2015-2141.patch)
===================================================================
--- extra-x86_64/CVE-2015-2141.patch (rev 0)
+++ extra-x86_64/CVE-2015-2141.patch 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,32 @@
+From 9425e16437439e68c7d96abef922167d68fafaff Mon Sep 17 00:00:00 2001
+From: Jeffrey Walton <noloader at gmail.com>
+Date: Sat, 27 Jun 2015 17:56:01 -0400
+Subject: [PATCH] Fix for CVE-2015-2141. Thanks to Evgeny Sidorov for
+ reporting. Squaring to satisfy Jacobi requirements suggested by JPM.
+
+---
+ rw.cpp | 8 +++++++-
+ 1 file changed, 7 insertions(+), 1 deletion(-)
+
+diff --git a/rw.cpp b/rw.cpp
+index cdd9f2d..0b9318b 100644
+--- a/rw.cpp
++++ b/rw.cpp
+@@ -126,10 +126,16 @@ Integer InvertibleRWFunction::CalculateInverse(RandomNumberGenerator &rng, const
+ DoQuickSanityCheck();
+ ModularArithmetic modn(m_n);
+ Integer r, rInv;
+- do { // do this in a loop for people using small numbers for testing
++
++ // do this in a loop for people using small numbers for testing
++ do {
+ r.Randomize(rng, Integer::One(), m_n - Integer::One());
++ // Fix for CVE-2015-2141. Thanks to Evgeny Sidorov for reporting.
++ // Squaring to satisfy Jacobi requirements suggested by JPM.
++ r = modn.Square(r);
+ rInv = modn.MultiplicativeInverse(r);
+ } while (rInv.IsZero());
++
+ Integer re = modn.Square(r);
+ re = modn.Multiply(re, x); // blind
+
Deleted: extra-x86_64/PKGBUILD
===================================================================
--- extra-x86_64/PKGBUILD 2015-07-24 11:57:33 UTC (rev 242478)
+++ extra-x86_64/PKGBUILD 2015-07-24 11:59:01 UTC (rev 242479)
@@ -1,36 +0,0 @@
-# $Id$
-# Maintainer: Giovanni Scafora <giovanni at archlinux.org>
-# Contributor: Alexander Rødseth <rodseth at gmail.com>
-# Contributor: Andrea Scarpino <andrea at archlinux.org>
-# Contributor: Kritoke <kritoke at gamebox.net>
-# Contributor: jlvsimoes <jlvsimoes at oninet.pt>
-
-pkgname=crypto++
-pkgver=5.6.2
-_srcver=562
-pkgrel=2
-pkgdesc="A free C++ class library of cryptographic schemes"
-arch=('i686' 'x86_64')
-url="http://www.cryptopp.com/"
-license=('custom')
-depends=('gcc-libs')
-makedepends=('unzip')
-source=("http://www.cryptopp.com/cryptopp${_srcver}.zip"
- 'libcrypto++.pc')
-md5sums=('7ed022585698df48e65ce9218f6c6a67'
- '46de3847c59ad16456fa863eb33e73b2')
-
-build() {
- sed -i -e 's/^CXXFLAGS/#CXXFLAGS/' GNUmakefile
- export CXXFLAGS="${CXXFLAGS} -DNDEBUG -fPIC"
- make -f GNUmakefile
- make libcryptopp.so
-}
-
-package() {
- install -d ${pkgdir}/usr/{lib/pkgconfig,include/cryptopp}
- install -m644 *.h ${pkgdir}/usr/include/cryptopp/
- install -m644 libcryptopp.so "${pkgdir}/usr/lib/libcryptopp.so"
- install -m644 ${srcdir}/libcrypto++.pc "${pkgdir}/usr/lib/pkgconfig/libcrypto++.pc"
- install -D -m644 License.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
-}
Copied: crypto++/repos/extra-x86_64/PKGBUILD (from rev 242478, crypto++/trunk/PKGBUILD)
===================================================================
--- extra-x86_64/PKGBUILD (rev 0)
+++ extra-x86_64/PKGBUILD 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,42 @@
+# $Id$
+# Maintainer: Giovanni Scafora <giovanni at archlinux.org>
+# Contributor: Alexander Rødseth <rodseth at gmail.com>
+# Contributor: Andrea Scarpino <andrea at archlinux.org>
+# Contributor: Kritoke <kritoke at gamebox.net>
+# Contributor: jlvsimoes <jlvsimoes at oninet.pt>
+
+pkgname=crypto++
+pkgver=5.6.2
+_srcver=562
+pkgrel=3
+pkgdesc="A free C++ class library of cryptographic schemes"
+arch=('i686' 'x86_64')
+url="http://www.cryptopp.com/"
+license=('custom')
+depends=('gcc-libs')
+makedepends=('unzip')
+source=("http://www.cryptopp.com/cryptopp${_srcver}.zip"
+ 'CVE-2015-2141.patch'
+ 'libcrypto++.pc')
+md5sums=('7ed022585698df48e65ce9218f6c6a67'
+ '7ff9a215b9244b4f8a17c7185e27beda'
+ '46de3847c59ad16456fa863eb33e73b2')
+
+prepare() {
+ patch -p1 -i ${srcdir}/CVE-2015-2141.patch
+}
+
+build() {
+ sed -i -e 's/^CXXFLAGS/#CXXFLAGS/' GNUmakefile
+ export CXXFLAGS="${CXXFLAGS} -DNDEBUG -fPIC"
+ make -f GNUmakefile
+ make libcryptopp.so
+}
+
+package() {
+ install -d ${pkgdir}/usr/{lib/pkgconfig,include/cryptopp}
+ install -m644 *.h ${pkgdir}/usr/include/cryptopp/
+ install -m644 libcryptopp.so "${pkgdir}/usr/lib/libcryptopp.so"
+ install -m644 ${srcdir}/libcrypto++.pc "${pkgdir}/usr/lib/pkgconfig/libcrypto++.pc"
+ install -D -m644 License.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
+}
Deleted: extra-x86_64/libcrypto++.pc
===================================================================
--- extra-x86_64/libcrypto++.pc 2015-07-24 11:57:33 UTC (rev 242478)
+++ extra-x86_64/libcrypto++.pc 2015-07-24 11:59:01 UTC (rev 242479)
@@ -1,11 +0,0 @@
-# Written by Alexander Rødseth <rodseth at gmail.com>
-
-prefix=/usr
-libdir=${prefix}/lib
-includedir=${prefix}/include
-
-Name: libcrypto++-5.6.2
-Description: Class library of cryptographic schemes
-Version: 5.6.2
-Libs: -L${libdir} -lcryptopp
-Cflags: -I${includedir}
Copied: crypto++/repos/extra-x86_64/libcrypto++.pc (from rev 242478, crypto++/trunk/libcrypto++.pc)
===================================================================
--- extra-x86_64/libcrypto++.pc (rev 0)
+++ extra-x86_64/libcrypto++.pc 2015-07-24 11:59:01 UTC (rev 242479)
@@ -0,0 +1,11 @@
+# Written by Alexander Rødseth <rodseth at gmail.com>
+
+prefix=/usr
+libdir=${prefix}/lib
+includedir=${prefix}/include
+
+Name: libcrypto++-5.6.2
+Description: Class library of cryptographic schemes
+Version: 5.6.2
+Libs: -L${libdir} -lcryptopp
+Cflags: -I${includedir}
More information about the arch-commits
mailing list