source: projects/specs/branches/6/lib/libg/libgcrypt/libgcrypt-vl.spec @ 9503

Revision 9503, 5.5 KB checked in by iwamoto, 9 years ago (diff)

libgcrypt: CVE-2014-3591,5270, CVE-2015-0837

Line 
1%define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
2Summary: A cryptographic library based on the code from GnuPG.
3Summary(ja): GnuPG のコードをベースとした暗号化ライブラリ
4Name: libgcrypt
5Version: 1.4.6
6Release: 3%{?_dist_release}
7URL: http://www.gnu.org/directory/security/libgcrypt.html
8Source0: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2
9Source1: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2.sig
10
11Patch100: libgcrypt_CVE-2013-4242.patch
12Patch110: libgcrypt-1.4.x_CVE-2014-3591.patch
13Patch120: libgcrypt-1.4.x_Add_gcry_divide_by_zero.patch
14Patch121: libgcrypt-1.4.x_CVE-2014-5270.patch
15Patch130: libgcrypt-1.4.x_CVE-2015-0837.patch
16
17License: GPLv2+
18Group: System Environment/Libraries
19
20BuildRoot: %{_tmppath}/%{name}-%{version}-root
21BuildRequires: libgpg-error-devel >= 0.5
22Requires: libgpg-error
23Requires(post,preun): /sbin/install-info
24
25Vendor: Project Vine
26Distribution: Vine Linux
27
28%description
29This is a general purpose cryptographic library based on the code from
30GnuPG. It provides functions for all cryptograhic building blocks:
31symmetric ciphers (AES, DES, Blowfish, CAST5, Twofish, Arcfour), hash
32algorithms (MD4, MD5, RIPE-MD160, SHA-1, TIGER-192), MACs (HMAC for
33all hash algorithms), public key algorithms (RSA, ElGamal, DSA), large
34integer functions, random numbers and a lot of supporting functions.
35
36%package devel
37Summary: Development files for libgcrypt
38Summary(ja): libgcrypt を使った開発に必要なヘッダやライブラリ
39Group: Development/Libraries
40Requires: %{name} = %{version}-%{release}
41Requires: libgpg-error-devel
42
43%description devel
44Static libraries and header files from libgcrypt.
45
46%package -n compat32-%{name}
47Summary: A cryptographic library based on the code from GnuPG.
48Summary(ja): GnuPG のコードをベースとした暗号化ライブラリ
49Group: System Environment/Libraries
50Requires: %{name} = %{version}-%{release}
51
52%description -n compat32-%{name}
53This is a general purpose cryptographic library based on the code from
54GnuPG. It provides functions for all cryptograhic building blocks:
55symmetric ciphers (AES, DES, Blowfish, CAST5, Twofish, Arcfour), hash
56algorithms (MD4, MD5, RIPE-MD160, SHA-1, TIGER-192), MACs (HMAC for
57all hash algorithms), public key algorithms (RSA, ElGamal, DSA), large
58integer functions, random numbers and a lot of supporting functions.
59
60%package -n compat32-%{name}-devel
61Summary: Development files for libgcrypt
62Summary(ja): libgcrypt を使った開発に必要なヘッダやライブラリ
63Group: Development/Libraries
64Requires: compat32-%{name} = %{version}-%{release}
65Requires: %{name}-devel = %{version}-%{release}
66Requires: compat32-libgpg-error-devel
67
68%description -n compat32-%{name}-devel
69Static libraries and header files from libgcrypt.
70
71%prep
72%setup -q
73
74%patch100 -p1 -b .CVE-2013-4242
75%patch110 -p1 -b .CVE-2014-3591
76%patch120 -p1 -b .Add_gcry_divide_by_zero
77%patch121 -p1 -b .CVE-2014-5270
78%patch130 -p1 -b .CVE-2015-0837
79
80%build
81%configure --disable-static
82make
83
84%install
85[ "%{buildroot}" != / ] && rm -rf %{buildroot}
86%makeinstall
87rm -f %{buildroot}%{_infodir}/dir
88
89## remove unuse files
90rm -rf $RPM_BUILD_ROOT%{_libdir}/*.la
91
92
93%clean
94[ "%{buildroot}" != / ] && rm -rf %{buildroot}
95
96%post -p /sbin/ldconfig
97
98%postun -p /sbin/ldconfig
99
100%post devel
101/sbin/install-info --info-dir=%{_infodir} %{_infodir}/gcrypt.info.gz ||:
102
103%preun devel
104if [ $1 = 0 ]; then
105    /sbin/install-info --delete %{_infodir}/gcrypt.info.gz %{_infodir}/dir ||:
106fi
107
108%post -n compat32-%{name} -p /sbin/ldconfig
109
110%postun -n compat32-%{name} -p /sbin/ldconfig
111
112%files
113%defattr(-,root,root)
114%{_bindir}/dumpsexp
115%{_bindir}/hmac256
116%{_libdir}/*.so.*
117
118%files devel
119%defattr(-,root,root)
120%doc README* NEWS
121%{_bindir}/libgcrypt-config
122%{_includedir}/*
123%{_libdir}/*.so
124%{_datadir}/aclocal/libgcrypt.m4
125%{_infodir}/*
126
127# compat32
128%if %{build_compat32}
129%files -n compat32-%{name}
130%defattr(-,root,root)
131%{_libdir}/*.so.*
132
133%files -n compat32-%{name}-devel
134%defattr(-,root,root)
135%{_libdir}/*.so
136%endif
137
138%changelog
139* Wed Apr  8 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.4.6-3
140- add patch patch110 for fix CVE-2014-3591
141- add patch patch120,121 for fix CVE-2014-5270
142- add patch patch130 for fix CVE-2015-0837
143- add Vendor/Distri tags
144
145* Thu Aug 08 2013 Toshiahru Kudoh <toshi.kd2@gmail.com> 1.4.6-2
146- added patch100 for fix CVE-2013-4242
147
148* Sat Oct 02 2010 Yoji TOYODA <bsyamato@sea.plala.or.jp> 1.4.6-1
149- new upstream release
150
151* Sat Jun 27 2009 NAKAMURA Kenta <kenta@vinelinux.org> 1.4.3-3
152- added compat32 package for x86_64 arch support
153- added --disable-static %%configure option
154
155* Thu Sep 25 2008 Shu KONNO <owa@bg.wakwak.com> 1.4.3-2
156- removed *.la
157
158* Tue Sep 23 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.3-1
159- new upstream release
160
161* Tue Mar 18 2008 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 1.4.0-1vl5
162- new upstream release
163- used _dist_release macro
164
165* Sat Mar 15 2008 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 1.4.0-0vl1
166- new upstream release
167
168* Sun Nov 26 2006 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 1.2.3-0vl1
169- new upstream release
170- changed Group to System Environment/Libraries
171
172* Fri Dec 30 2005 KAZUKI SHIMURA <kazuki@ma.ccnw.ne.jp> 1.2.2-0vl1
173- new upstream release
174
175* Mon Mar 28 2005 KAZUKI SHIMURA <kazuki@ma.ccnw.ne.jp> 1.2.1-0vl1
176- new upstream release
177- fix dependencies
178  - add BuildRequires: libgpg-error-devel >= 0.5
179  - add Requires: libgpg-error
180  - add Requires: libgpg-error-devel for devel package
181
182* Tue Nov 30 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.0-0vl1
183- new upstream release
184
185* Sun Mar  7 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 1.1.12-0vl1
186- initial build
187
Note: See TracBrowser for help on using the repository browser.