[pkgsrc/trunk]: pkgsrc/security/libgcrypt libgcrypt: update to 1.9.4.

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/5c7ef9bc005b
branches:  trunk
changeset: 457668:5c7ef9bc005b
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Mon Aug 30 15:53:43 2021 +0000

description:
libgcrypt: update to 1.9.4.

Noteworthy changes in version 1.9.4 (2021-08-22)  [C23/A3/R4]
------------------------------------------------

 * Bug fixes:

   - Fix Elgamal encryption for other implementations.
     [#5328,CVE-2021-33560]

   - Fix alignment problem on macOS.  [#5440]

   - Check the input length of the point in ECDH.  [#5423]

   - Fix an abort in gcry_pk_get_param for "Curve25519".  [#5490]

 * Other features:

   - Add GCM and CCM to OID mapping table for AES. [a83fb13a3b]

diffstat:

 security/libgcrypt/Makefile                                  |   4 +-
 security/libgcrypt/distinfo                                  |  11 ++--
 security/libgcrypt/patches/patch-random_jitterentropy-base.c |  26 ------------
 3 files changed, 7 insertions(+), 34 deletions(-)

diffs (63 lines):

diff -r c73cea5d1736 -r 5c7ef9bc005b security/libgcrypt/Makefile
--- a/security/libgcrypt/Makefile       Mon Aug 30 15:51:00 2021 +0000
+++ b/security/libgcrypt/Makefile       Mon Aug 30 15:53:43 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.103 2021/04/21 08:28:31 adam Exp $
+# $NetBSD: Makefile,v 1.104 2021/08/30 15:53:43 wiz Exp $
 
-DISTNAME=      libgcrypt-1.9.3
+DISTNAME=      libgcrypt-1.9.4
 CATEGORIES=    security
 MASTER_SITES=  https://gnupg.org/ftp/gcrypt/libgcrypt/
 EXTRACT_SUFX=  .tar.bz2
diff -r c73cea5d1736 -r 5c7ef9bc005b security/libgcrypt/distinfo
--- a/security/libgcrypt/distinfo       Mon Aug 30 15:51:00 2021 +0000
+++ b/security/libgcrypt/distinfo       Mon Aug 30 15:53:43 2021 +0000
@@ -1,12 +1,11 @@
-$NetBSD: distinfo,v 1.90 2021/06/19 11:17:53 spz Exp $
+$NetBSD: distinfo,v 1.91 2021/08/30 15:53:43 wiz Exp $
 
-SHA1 (libgcrypt-1.9.3.tar.bz2) = 6b18f453fee677078586279d96fb88e5df7b3f35
-RMD160 (libgcrypt-1.9.3.tar.bz2) = 5f0e3bf03ee5d5f80628136a592a24e23fa68b5f
-SHA512 (libgcrypt-1.9.3.tar.bz2) = 977e766887c14f19aa1b9fcc0214303036a649e41cd4278de76da7d734cf36888e2e1b6275590dac523dcb4ba8ab07993e6ee8209fd5f1a3383d738b09a060d6
-Size (libgcrypt-1.9.3.tar.bz2) = 3219061 bytes
+SHA1 (libgcrypt-1.9.4.tar.bz2) = 1bccc8393482fa1953323ff429c6b5ba5676eb1a
+RMD160 (libgcrypt-1.9.4.tar.bz2) = 04ba20bde2cc765932be6c9433dec0d1bbb64335
+SHA512 (libgcrypt-1.9.4.tar.bz2) = d0e117ac73c94d70e9521ee1e6328691498cc8328f8c4e21338096908f5c04c7b838966eb63d59494565f4e19f506c07dab4f4d922150d75610d9f7b57abbf60
+Size (libgcrypt-1.9.4.tar.bz2) = 3239704 bytes
 SHA1 (patch-aa) = 60b3f4453b217ed8879a2ffd8d485c0195ffb5f8
 SHA1 (patch-cipher_rijndael-arm.S) = ef3cb7f481022440780eb48ae31cbfad0a3ec115
 SHA1 (patch-configure) = edc92453a0843ab0442da7f1b9df2ef4c219bdf5
 SHA1 (patch-mpi_config.links) = 0e87480ead46914653405bb9c693554180ccd126
-SHA1 (patch-random_jitterentropy-base.c) = 5a14676aae7ad5d12f9f0bed366af5183aaf22ad
 SHA1 (patch-src_visibility.h) = 8cbbf6803ab34b4b7dda832aa8ee18247aa89518
diff -r c73cea5d1736 -r 5c7ef9bc005b security/libgcrypt/patches/patch-random_jitterentropy-base.c
--- a/security/libgcrypt/patches/patch-random_jitterentropy-base.c      Mon Aug 30 15:51:00 2021 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,26 +0,0 @@
-$NetBSD: patch-random_jitterentropy-base.c,v 1.1 2018/05/11 19:20:11 kamil Exp $
-
-Port to Clang.
-
---- random/jitterentropy-base.c.orig   2017-11-23 18:16:58.000000000 +0000
-+++ random/jitterentropy-base.c
-@@ -50,13 +50,18 @@
-  */
- 
- #undef _FORTIFY_SOURCE
-+
-+#ifdef __clang__
-+#pragma clang optimize off
-+#else
- #pragma GCC optimize ("O0")
-+#endif
- 
- #include "jitterentropy.h"
- 
- #ifndef CONFIG_CRYPTO_CPU_JITTERENTROPY_STAT
-  /* only check optimization in a compilation for real work */
-- #ifdef __OPTIMIZE__
-+ #if defined(__OPTIMIZE__) && !defined(__clang__)
-   #error "The CPU Jitter random number generator must not be compiled with optimizations. See documentation. Use the compiler switch -O0 for compiling jitterentropy-base.c."
-  #endif
- #endif