Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 570416 - dev-libs/crypto++-5.6.3 version bump
Summary: dev-libs/crypto++-5.6.3 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2016-3995
  Show dependency tree
 
Reported: 2015-12-31 17:17 UTC by Ian Moone
Modified: 2016-10-03 22:48 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
crypto++-5.6.3-build.patch (crypto++-5.6.3-build.patch,8.27 KB, patch)
2016-01-21 19:49 UTC, Alon Bar-Lev (RETIRED) 		Details | Diff
crypto++-5.6.3.ebuild.diff (crypto++-5.6.3.ebuild.diff,1.15 KB, patch)
2016-01-21 19:50 UTC, Alon Bar-Lev (RETIRED) 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ian Moone 2015-12-31 17:17:36 UTC 
New version released. Please upgrade.

https://cryptopp.com/release563.html
Comment 1 Tomáš Mózes 2015-12-31 20:00:37 UTC 
Seems like a security bump, from the changelog:
fixed CVE-2015-2141
Comment 2 Alon Bar-Lev (RETIRED) gentoo-dev 2016-01-21 19:48:49 UTC 
Hi,

CVE-2015-2141 is already resolved in tree.

The new version does not pass tests:
---
Testing RDSEED generator...
CryptoPP::Exception caught: RDSEED: GCC_RSA_GenerateBlock operation failed
---
I tried to:
 append-flags -DCRYPTOPP_BOOL_RDSEED_ASM=0 -DCRYPTOPP_BOOL_RDRAND_ASM=0
Then got:
---
Testing RDSEED generator...
CryptoPP::Exception caught: RDSEED: ALL_RSI_GenerateBlock operation failed
---
So something fundamentally wrong in this version.
Will not add to tree until this is resolved upstream.
Comment 3 Alon Bar-Lev (RETIRED) gentoo-dev 2016-01-21 19:49:45 UTC 
Created attachment 423552 [details, diff]
crypto++-5.6.3-build.patch
Comment 4 Alon Bar-Lev (RETIRED) gentoo-dev 2016-01-21 19:50:31 UTC 
Created attachment 423554 [details, diff]
crypto++-5.6.3.ebuild.diff
Comment 5 Alon Bar-Lev (RETIRED) gentoo-dev 2016-10-03 22:48:30 UTC 
5.6.4 added, please check.