CVS commit: pkgsrc/security/libgcrypt

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Nov 15 10:06:12 UTC 2023

Modified Files:
        pkgsrc/security/libgcrypt: Makefile distinfo
        pkgsrc/security/libgcrypt/patches: patch-configure
Removed Files:
        pkgsrc/security/libgcrypt/patches: patch-random_rndgetentropy.c

Log Message:
libgcrypt: updated to 1.10.3

Noteworthy changes in version 1.10.3 (2023-11-14)
-------------------------------------------------

* Bug fixes:

  - Fix public key computation for other EdDSA curves.
  - Remove out of core handler diagnostic in FIPS mode.
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md.
  - Make store an s-exp with \0 is considered to be binary.
  - Various constant-time improvements.

* Portability:
  - Use getrandom call only when supported by the platform.
  - Change the default for --with-libtool-modification to never.


To generate a diff of this commit:
cvs rdiff -u -r1.109 -r1.110 pkgsrc/security/libgcrypt/Makefile
cvs rdiff -u -r1.97 -r1.98 pkgsrc/security/libgcrypt/distinfo
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/libgcrypt/patches/patch-configure
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/security/libgcrypt/patches/patch-random_rndgetentropy.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/libgcrypt/Makefile
diff -u pkgsrc/security/libgcrypt/Makefile:1.109 pkgsrc/security/libgcrypt/Makefile:1.110
--- pkgsrc/security/libgcrypt/Makefile:1.109    Thu Jun 15 23:41:41 2023
+++ pkgsrc/security/libgcrypt/Makefile  Wed Nov 15 10:06:12 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.109 2023/06/15 23:41:41 riastradh Exp $
+# $NetBSD: Makefile,v 1.110 2023/11/15 10:06:12 adam Exp $
 
-DISTNAME=      libgcrypt-1.10.2
+DISTNAME=      libgcrypt-1.10.3
 CATEGORIES=    security
 MASTER_SITES=  https://gnupg.org/ftp/gcrypt/libgcrypt/
 EXTRACT_SUFX=  .tar.bz2
@@ -40,8 +40,8 @@ CONFIGURE_ARGS+=      CC_FOR_BUILD=${NATIVE_C
 # dependencies like libgcrypt.  I don't see a way to use pkg-config or
 # anything reasonable to override this, so, we do the nonsense thing
 # instead.
-CONFIGURE_ARGS+=       GPGRT_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE:Q}/bin/gpgrt-config
-CONFIGURE_ARGS+=       GPG_ERROR_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE:Q}/bin/gpg-error-config
+CONFIGURE_ARGS+=       GPGRT_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE}/bin/gpgrt-config
+CONFIGURE_ARGS+=       GPG_ERROR_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE}/bin/gpg-error-config
 .endif
 
 BUILDLINK_API_DEPENDS.libgpg-error+=   libgpg-error>=1.13

Index: pkgsrc/security/libgcrypt/distinfo
diff -u pkgsrc/security/libgcrypt/distinfo:1.97 pkgsrc/security/libgcrypt/distinfo:1.98
--- pkgsrc/security/libgcrypt/distinfo:1.97     Fri Apr  7 09:15:55 2023
+++ pkgsrc/security/libgcrypt/distinfo  Wed Nov 15 10:06:12 2023
@@ -1,12 +1,11 @@
-$NetBSD: distinfo,v 1.97 2023/04/07 09:15:55 adam Exp $
+$NetBSD: distinfo,v 1.98 2023/11/15 10:06:12 adam Exp $
 
-BLAKE2s (libgcrypt-1.10.2.tar.bz2) = 4a2899cc51263592dbf0de725522679c7cbaebd123906bd602b4382bf0c51f41
-SHA512 (libgcrypt-1.10.2.tar.bz2) = 3a850baddfe8ffe8b3e96dc54af3fbb9e1dab204db1f06b9b90b8fbbfb7fb7276260cd1e61ba4dde5a662a2385385007478834e62e95f785d2e3d32652adb29e
-Size (libgcrypt-1.10.2.tar.bz2) = 3795164 bytes
+BLAKE2s (libgcrypt-1.10.3.tar.bz2) = 71cefea84ce054f245b8e5c647e4ea191773fcb2b74a51bd22346a3a64e2d294
+SHA512 (libgcrypt-1.10.3.tar.bz2) = 8a8d4c61a6622d8481ceb9edc88ec43f58da32e316f79f8d4775325a48f8936aaa9eb355923b39e2c267b784e9c390600daeb62e0c94f00e30bbadb0d8c0865d
+Size (libgcrypt-1.10.3.tar.bz2) = 3783827 bytes
 SHA1 (patch-aa) = 60b3f4453b217ed8879a2ffd8d485c0195ffb5f8
 SHA1 (patch-cipher_rijndael-arm.S) = ef3cb7f481022440780eb48ae31cbfad0a3ec115
 SHA1 (patch-config.h.in) = b065aca0c4bf11cd45507b14d60b682be10ab8c9
-SHA1 (patch-configure) = 5987b397f5fb49598b936eb328f43c9e8a824425
+SHA1 (patch-configure) = dc15bce05cc2c9b9c43f6ac59a7a0f9e54fe0c2b
 SHA1 (patch-mpi_config.links) = 0e87480ead46914653405bb9c693554180ccd126
-SHA1 (patch-random_rndgetentropy.c) = b927090beb3e109fb2e00bd3c6cfeff9d9c6a9f0
 SHA1 (patch-src_visibility.h) = 8cbbf6803ab34b4b7dda832aa8ee18247aa89518

Index: pkgsrc/security/libgcrypt/patches/patch-configure
diff -u pkgsrc/security/libgcrypt/patches/patch-configure:1.9 pkgsrc/security/libgcrypt/patches/patch-configure:1.10
--- pkgsrc/security/libgcrypt/patches/patch-configure:1.9       Fri Apr  7 09:15:55 2023
+++ pkgsrc/security/libgcrypt/patches/patch-configure   Wed Nov 15 10:06:12 2023
@@ -1,26 +1,17 @@
-$NetBSD: patch-configure,v 1.9 2023/04/07 09:15:55 adam Exp $
+$NetBSD: patch-configure,v 1.10 2023/11/15 10:06:12 adam Exp $
 
 Fix unportable test(1) operator.
 
 Detect presence of getrandom(2). https://dev.gnupg.org/T6442
 
---- configure.orig     2023-04-06 19:07:18.000000000 +0000
+--- configure.orig     2023-11-14 12:01:30.000000000 +0000
 +++ configure
-@@ -18444,7 +18444,7 @@ CFLAGS="$CFLAGS -maltivec -mvsx -mcrypto
+@@ -19535,7 +19535,7 @@ CFLAGS="$CFLAGS -maltivec -mvsx -mcrypto
  
  if test "$gcry_cv_cc_ppc_altivec" = "no" &&
      test "$mpi_cpu_arch" = "ppc" &&
 -    test "$try_asm_modules" == "yes" ; then
 +    test "$try_asm_modules" = "yes" ; then
-   { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether compiler supports PowerPC AltiVec/VSX/crypto intrinsics with extra GCC flags" >&5
- $as_echo_n "checking whether compiler supports PowerPC AltiVec/VSX/crypto intrinsics with extra GCC flags... " >&6; }
- if ${gcry_cv_cc_ppc_altivec_cflags+:} false; then :
-@@ -18809,7 +18809,7 @@ _ACEOF
- fi
- done
- 
--for ac_func in explicit_bzero explicit_memset getentropy
-+for ac_func in explicit_bzero explicit_memset getentropy getrandom
- do :
-   as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
- ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+   { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether compiler supports PowerPC AltiVec/VSX/crypto intrinsics with extra GCC flags" >&5
+ printf %s "checking whether compiler supports PowerPC AltiVec/VSX/crypto intrinsics with extra GCC flags... " >&6; }
+ if test ${gcry_cv_cc_ppc_altivec_cflags+y}