CVS commit: pkgsrc/security/nettle

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jun  6 05:12:06 UTC 2023

Modified Files:
        pkgsrc/security/nettle: Makefile distinfo

Log Message:
nettle: updated to 3.9.1

Nettle 3.9.1 release

This is a bugfix release, fixing a few bugs reported for
Nettle-3.9. The bug in the new OCB code may be exploitable for
denial of service or worse, since triggering it leads to
memory corruption. Upgrading from Nettle-3.9 to the new
version is strongly recommended.

The new version is intended to be fully source and binary
compatible with Nettle-3.6. The shared library names are
libnettle.so.8.8 and libhogweed.so.6.8, with sonames
libnettle.so.8 and libhogweed.so.6.

Bug fixes:

* Fix OCB loop for processing messages of size 272 bytes or
  larger. Reported and fixed by Jussi Kivilinna.

* Fix alignment bug in the new x86_64 non-pclmul assembly
  implementation of ghash. Reported by Henrik Grubbström.

* Fix build-time memory leak in eccdata. Reported by Noah
  Watkins.


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/security/nettle/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/security/nettle/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/nettle/Makefile
diff -u pkgsrc/security/nettle/Makefile:1.30 pkgsrc/security/nettle/Makefile:1.31
--- pkgsrc/security/nettle/Makefile:1.30        Tue May 23 13:25:32 2023
+++ pkgsrc/security/nettle/Makefile     Tue Jun  6 05:12:06 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.30 2023/05/23 13:25:32 wiz Exp $
+# $NetBSD: Makefile,v 1.31 2023/06/06 05:12:06 adam Exp $
 
-DISTNAME=      nettle-3.9
+DISTNAME=      nettle-3.9.1
 CATEGORIES=    security
 MASTER_SITES=  http://www.lysator.liu.se/~nisse/archive/
 MASTER_SITES+= ftp://ftp.lysator.liu.se/pub/security/lsh/

Index: pkgsrc/security/nettle/distinfo
diff -u pkgsrc/security/nettle/distinfo:1.27 pkgsrc/security/nettle/distinfo:1.28
--- pkgsrc/security/nettle/distinfo:1.27        Tue May 23 13:25:32 2023
+++ pkgsrc/security/nettle/distinfo     Tue Jun  6 05:12:06 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.27 2023/05/23 13:25:32 wiz Exp $
+$NetBSD: distinfo,v 1.28 2023/06/06 05:12:06 adam Exp $
 
-BLAKE2s (nettle-3.9.tar.gz) = f51a7489da228b0e6a372c6a894beca03062beb5a90e0c067e627ea004d6d3cd
-SHA512 (nettle-3.9.tar.gz) = 5e44f59b37ec1e92345fce0b963151d1f2aabf01b3a197b8d931067c51af4ba025059c6a07f2bcd19b17eb49d6ede98f5c200e58d340959826cda473459d2fba
-Size (nettle-3.9.tar.gz) = 2393838 bytes
+BLAKE2s (nettle-3.9.1.tar.gz) = c00600f7923208032b97baf11deb8a34fdf3a4c104415cd1175c44f4e1b8f57a
+SHA512 (nettle-3.9.1.tar.gz) = 5939c4b43cf9ff6c6272245b85f123c81f8f4e37089fa4f39a00a570016d837f6e706a33226e4bbfc531b02a55b2756ff312461225ed88de338a73069e031ced
+Size (nettle-3.9.1.tar.gz) = 2396741 bytes
 SHA1 (patch-Makefile.in) = ea2eed4a6f04d3cd83c1f6267230f9766eb48480
 SHA1 (patch-aa) = 2332668b077a6e3a1add603c87f60167755554ec
 SHA1 (patch-config.make.in) = 708fb3cac9c44825e0d231541cbecade2239c850