[fink:package-submissions] #4920 update libgcrypt and family to latest upstreams

Hanspeter Niederstrasser via Fink-tracker <[email protected]>
Newsgroups gmane.os.apple.fink.tracker
Message-ID </p/fink/package-submissions/4920/214cc8f40ee4f26746ff8168c85882db90391ceb.package-submissions@fink.p.sourceforge.net>
- Attachments has changed:

Diff:

~~~~

--- old
+++ new
@@ -3,5 +3,6 @@
 gnutls26.patch (5.4 kB; application/octet-stream)
 gnutls28.info (3.5 kB; application/octet-stream)
 libgcrypt.info (2.1 kB; application/octet-stream)
+libgcrypt20.info (2.4 kB; application/octet-stream)
 libgpg-error.info (1.2 kB; application/octet-stream)
 libtasn1-6-dev.info (1.2 kB; application/octet-stream)

~~~~

- **Comment**:

Update libgcrypt to 1.7.8 which fixes a recent CVE.



---

** [package-submissions:#4920] update libgcrypt and family to latest upstreams**

**Status:** open
**Group:** Awaiting_OK_from_Maintainer
**Labels:** crypto Updated Version of Existing 
**Created:** Sat Jun 03, 2017 05:45 PM UTC by Hanspeter Niederstrasser
**Last Updated:** Sun Jun 04, 2017 03:24 PM UTC
**Owner:** Dave Reiser
**Attachments:**

- [gnutls-2.12.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/gnutls-2.12.info) (3.4 kB; application/octet-stream)
- [gnutls26.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/gnutls26.info) (2.7 kB; application/octet-stream)
- [gnutls26.patch](https://sourceforge.net/p/fink/package-submissions/4920/attachment/gnutls26.patch) (5.4 kB; application/octet-stream)
- [gnutls28.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/gnutls28.info) (3.5 kB; application/octet-stream)
- [libgcrypt.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/libgcrypt.info) (2.1 kB; application/octet-stream)
- [libgcrypt20.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/libgcrypt20.info) (2.4 kB; application/octet-stream)
- [libgpg-error.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/libgpg-error.info) (1.2 kB; application/octet-stream)
- [libtasn1-6-dev.info](https://sourceforge.net/p/fink/package-submissions/4920/attachment/libtasn1-6-dev.info) (1.2 kB; application/octet-stream)


These are updated versions of gnutls, libgcrypt, gpg-error, and libtasn. Latest gnutls updates the libN to gnutsl30, so I just added it to Conflicts/Replaces to our current files for future-proofing when that package gets added.

~~~~
cvs diff: Diffing .
Index: gnutls-2.12.info
===================================================================
RCS file: /cvsroot/fink/dists/10.9-libcxx/stable/main/finkinfo/crypto/gnutls-2.12.info,v
retrieving revision 1.1
diff -u -U8 -r1.1 gnutls-2.12.info
--- gnutls-2.12.info	10 Sep 2015 20:43:00 -0000	1.1
+++ gnutls-2.12.info	3 Jun 2017 12:31:28 -0000
@@ -1,21 +1,21 @@
 Package: gnutls-2.12
-Version: 2.12.23
+Version: 2.12.24
 Revision: 1
-Source: ftp://ftp.gnutls.org/gcrypt/gnutls/v2.12/gnutls-%v.tar.bz2
-Source-MD5: f3c1d34bd5f113395c4be0d5dfc2b7fe
+Source: ftp://ftp.gnutls.org/gcrypt/gnutls/v2.12/gnutls-%v.tar.xz
+Source-MD5: b09960551d963f1187bb9f87f1577bfa
 GCC: 4.0
 Depends: %N-shlibs (= %v-%r)
-Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls28
-Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls28
+Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
+Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
 BuildDepends: <<
-  fink (>= 0.28-1), fink-package-precedence, gmp5,
+  fink (>= 0.32-1), fink-package-precedence, gmp5,
   libtool2, libgettext8-dev, libiconv-dev, nettle4a, pkgconfig,
-  libtasn1-3, readline6
+  libtasn1-3, readline7
 <<
 BuildDependsOnly: True
 PatchScript: <<
   perl -pi -e 's|_WIN32|_DARWIN_C_SOURCE|g' tests/chainverify.c
   perl -pi -e 's|LTLIBTASN1|LIBTASN1_LIBS|g' libextra/Makefile.in
 <<
 UseMaxBuildJobs: false
 ConfigureParams: <<
@@ -29,17 +29,17 @@
 InstallScript: <<
   make install DESTDIR=%d
   /bin/mv %i/lib/gnutls-2.12/pkgconfig %i/lib  
 <<  
 SplitOff: <<
   Package: %N-shlibs
   Depends: <<
     gmp5-shlibs, libgettext8-shlibs, libhogweed-shlibs,
-    libiconv, libtasn1-3-shlibs, nettle4a-shlibs, readline6-shlibs
+    libiconv, libtasn1-3-shlibs, nettle4a-shlibs, readline7-shlibs
   <<
   DocFiles: COPYING README lib/COPYING:COPYING.lib libextra/COPYING:COPYING.libextra
   Files: <<
     lib/gnutls-2.12/libgnutls.26.dylib
     lib/gnutls-2.12/libgnutls-extra.26.dylib
     lib/gnutls-2.12/libgnutls-openssl.27.dylib
     lib/gnutls-2.12/libgnutlsxx.27.dylib
   <<
Index: gnutls26.info
===================================================================
RCS file: /cvsroot/fink/dists/10.9-libcxx/stable/main/finkinfo/crypto/gnutls26.info,v
retrieving revision 1.2
diff -u -U8 -r1.2 gnutls26.info
--- gnutls26.info	9 Jun 2016 03:04:11 -0000	1.2
+++ gnutls26.info	3 Jun 2017 12:31:28 -0000
@@ -1,40 +1,42 @@
 Package: gnutls26
-Version: 2.10.2
-Revision: 5
+Version: 2.10.5
+Revision: 1
 Source: mirror:custom:gnutls-%v.tar.bz2
 CustomMirror: <<
-  nam-US: ftp://ftp.gnutls.org/pub/gnutls/
+  nam-US: ftp://ftp.gnutls.org/gcrypt/gnutls/v2.10
 <<
-Source-MD5: 777823f5746ab80cd6f7f7b5fcb2f91b
+Source-MD5: 1b032e07ccd22f71a5df78aa73bd91f2
 GCC: 4.0
 Depends: %N-shlibs (= %v-%r)
-Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls-2.12, gnutls28
-Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls-2.12, gnutls28
+Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
+Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
 BuildDepends: <<
   autoconf2.6 (>=2.63-1), automake1.15, fink (>= 0.28-1), fink-package-precedence,
   libtool2, libgettext8-dev, libiconv-dev, pkgconfig,
-  libgcrypt (>= 1.4.3-2), libgpg-error, libtasn1-3, readline6
+  libgcrypt (>= 1.4.3-2), libgpg-error, libtasn1-3, readline7
 <<
 BuildDependsOnly: True
 UseMaxBuildJobs: false
+PatchFile: %n.patch
+PatchFile-MD5: 98f688b99d92a64190d85f91c70ed3e3
 ConfigureParams: <<
   --mandir=%p/share/man --infodir=%p/share/info --enable-dependency-tracking --disable-guile --disable-openpgp-authentication
 <<
 CompileScript: <<
   %{default_script}
   fink-package-precedence .
 <<
 InstallScript: make install DESTDIR=%d
 SplitOff: <<
   Package: %N-shlibs
   Depends: <<
     libgettext8-shlibs, libgcrypt-shlibs (>= 1.4.3-2), libgpg-error-shlibs,
-    libiconv, libtasn1-3-shlibs, readline6-shlibs
+    libiconv, libtasn1-3-shlibs, readline7-shlibs
   <<
   DocFiles: COPYING README lib/COPYING:COPYING.lib libextra/COPYING:COPYING.libextra
   Files: <<
     lib/libgnutls-extra.26.dylib
     lib/libgnutls-openssl.26.dylib
     lib/libgnutls.26.dylib
     lib/libgnutlsxx.26.dylib
   <<
@@ -57,13 +59,15 @@
   "The TLS protocol provides communications privacy over the Internet.
    The protocol allows client/server applications to communicate in a way that
    is designed to prevent eavesdropping, tampering, or message forgery."
 <<
 DescPort: <<
    GnuTLS now uses an internal opencdk, even if the independent lib and headers are installed.
 <<
 DescPackaging: <<
-	Does not seem compatible with libtasn1-6 API
+	Does not seem compatible with libtasn1-6 API.
+	
+	snprintf macro fix modified from upstream commit 57af3b052c793.
 <<
 License: GPL/LGPL
 Maintainer: Dave Reiser <[email protected]>
 Homepage: http://www.gnutls.org/
Index: gnutls28.info
===================================================================
RCS file: /cvsroot/fink/dists/10.9-libcxx/stable/main/finkinfo/crypto/gnutls28.info,v
retrieving revision 1.2
diff -u -U8 -r1.2 gnutls28.info
--- gnutls28.info	25 Oct 2015 03:41:26 -0000	1.2
+++ gnutls28.info	3 Jun 2017 12:31:28 -0000
@@ -1,30 +1,30 @@
 Package: gnutls28
-Version: 3.3.18
+Version: 3.3.27
 Revision: 1
 Source: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-%v.tar.xz
-Source-MD5: dbd5c7d3d925d42b821aab6a917113dd
+Source-MD5: 8ee8cebd7f7575b11f232766a21c31d3
 SourceDirectory: gnutls-%v
 GCC: 4.0
 Depends: %N-shlibs (= %v-%r), libidn-shlibs
-Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12
-Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12
+Replaces: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
+Conflicts: gnutls-dev, gnutls, gnutls12, gnutls14, gnutls26, gnutls-2.12, gnutls28, gnutls30
 BuildDepends: <<
   fink (>= 0.32), fink-package-precedence, autogen (>=5.18.2-3), autogen-dev, 
   gmp5, libidn, libtool2, libgettext8-dev, libiconv-dev, pkgconfig,
   nettle4a (>= 2.7-1), libtasn1-6-dev (>= 3.9-1)
 <<
 BuildDependsOnly: True
 PatchScript: <<
   #!/bin/bash -ev
   # stdalign.h patch added to circumvent Xcode 4.3.1 issue
   perl -pi -e "s|STDALIGN_H=''|STDALIGN_H='stdalign.h'|g" ./configure
   #patch around strerror being turned into rpl_strerror
-  perl -pi -e "s|, strerror|, gnutls_strerror|g" tests/openpgp-auth.c tests/openpgp-auth2.c
+  perl -pi -e "s|, strerror|, gnutls_strerror|g" tests/openpgp-auth.c tests/openpgp-auth2.c tests/crt_apis.c
   #strip unnecessary lines from .pc
   perl -pi -e "s|^Libs\.private.*\n||g" lib/gnutls.pc.in
   perl -pi -e "s|\@GNUTLS_REQUIRES_PRIVATE\@\n||g" lib/gnutls.pc.in
 <<
 ConfigureParams: <<
   --libdir=%p/lib/gnutls28 \
   --with-libintl-prefix=%p \
   --with-libiconv-prefix=%p \
@@ -59,17 +59,17 @@
   <<
   DocFiles: COPYING README lib/README:README.lib 
   Files: <<
     lib/gnutls28/libgnutls.28.dylib
     lib/gnutls28/libgnutls-openssl.27.dylib
     lib/gnutls28/libgnutlsxx.28.dylib
   <<
   Shlibs: <<
-    %p/lib/gnutls28/libgnutls.28.dylib         70.0.0 %n (>= 3.3.9-1)
+    %p/lib/gnutls28/libgnutls.28.dylib         72.0.0 %n (>= 3.3.27-1)
     %p/lib/gnutls28/libgnutls-openssl.27.dylib 28.0.0 %n (>= 3.0.8-1)
     %p/lib/gnutls28/libgnutlsxx.28.dylib       30.0.0 %n (>= 3.3.0-1)
   <<
 <<
 
 DocFiles: AUTHORS ChangeLog COPYING COPYING.LESSER NEWS README doc/reference/html
 InfoDocs: gnutls.info
 Description: GNU TLS encryption library
Index: libgpg-error.info
===================================================================
RCS file: /cvsroot/fink/dists/10.9-libcxx/stable/main/finkinfo/crypto/libgpg-error.info,v
retrieving revision 1.2
diff -u -U8 -r1.2 libgpg-error.info
--- libgpg-error.info	17 Dec 2015 05:26:18 -0000	1.2
+++ libgpg-error.info	3 Jun 2017 12:31:28 -0000
@@ -1,13 +1,13 @@
 Package: libgpg-error
-Version: 1.21
+Version: 1.27
 Revision: 1
 Source: ftp://ftp.gnupg.org/gcrypt/libgpg-error/libgpg-error-%v.tar.bz2
-Source-MD5: ab0b5aba6d0a185b41d07bda804fd8b2
+Source-MD5: 5217ef3e76a7275a2a3b569a12ddc989
 Depends: %N-shlibs (= %v-%r)
 Replaces: %N-dev
 Conflicts: %N-dev
 BuildDepends: libgettext8-dev, libiconv-dev
 BuildDependsOnly: True
 PatchScript: <<
 # Patch configure to not link like Puma on Yosemite
 perl -pi.bak -e 's|10\.\[012\]\*|10.[012][,.]*|g' configure
@@ -18,24 +18,25 @@
 <<
 InstallScript: make install DESTDIR=%d
 SplitOff: <<
   Package: %N-shlibs
   Depends: libgettext8-shlibs, libiconv
   Files: lib/libgpg-error.0*.dylib
   DocFiles: COPYING README
   Shlibs: <<
-    %p/lib/libgpg-error.0.dylib 18.0.0 %n (>= 1.21-1)
+    %p/lib/libgpg-error.0.dylib 23.0.0 %n (>= 1.27-1)
   <<
 <<
 DocFiles: AUTHORS COPYING COPYING.LIB ChangeLog NEWS README 
 InfoDocs: gpgrt.info
 InfoTest: <<
 TestScript: make check || exit 2
 <<
 Description: GPG error reporting library
 DescDetail: <<
 This is a library that defines common error values for all GnuPG
 components.  Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt,
 pinentry, SmartCard Daemon and possibly more in the future.
 <<
 License: GPL/LGPL
 Maintainer: Dave Reiser <[email protected]>
+Homepage: https://gnupg.org/software/libgpg-error/index.html
Index: libtasn1-6-dev.info
===================================================================
RCS file: /cvsroot/fink/dists/10.9-libcxx/stable/main/finkinfo/crypto/libtasn1-6-dev.info,v
retrieving revision 1.2
diff -u -U8 -r1.2 libtasn1-6-dev.info
--- libtasn1-6-dev.info	17 Dec 2015 05:09:41 -0000	1.2
+++ libtasn1-6-dev.info	3 Jun 2017 12:31:28 -0000
@@ -1,13 +1,13 @@
 Package: libtasn1-6-dev
-Version: 4.7
+Version: 4.12
 Revision: 1
 Source: mirror:gnu:libtasn1/libtasn1-%v.tar.gz
-Source-MD5: 12d10ca4ae0a3b95f7aa06a076da39ec
+Source-MD5: 5c724bd1f73aaf4a311833e1cd297b21
 PatchScript: perl -pi -e 's/-no-install//' tests/Makefile.in
 Depends: libtasn1-6-shlibs (= %v-%r)
 BuildDepends: pkgconfig (>= 0.20-1)
 BuildDependsOnly: True
 Replaces: libtasn1, libtasn1-3
 Conflicts: libtasn1, libtasn1-3
 SetCFLAGS: -fwrapv
 ConfigureParams: --mandir=%p/share/man --infodir=%p/share/info --disable-static
~~~~


---

Sent from sourceforge.net because [email protected] is subscribed to https://sourceforge.net/p/fink/package-submissions/

To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/fink/admin/package-submissions/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Fink-tracker mailing list
[email protected]
http://news.gmane.org/gmane.os.apple.fink.tracker
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.