* [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3
@ 2018-06-15 8:21 Baruch Siach
2018-06-15 11:17 ` Peter Korsgaard
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Baruch Siach @ 2018-06-15 8:21 UTC (permalink / raw)
To: buildroot
Fixes CVE-2018-0495: ECDSA signing side-channel attack.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
---
package/libgcrypt/libgcrypt.hash | 8 ++++----
package/libgcrypt/libgcrypt.mk | 2 +-
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/package/libgcrypt/libgcrypt.hash b/package/libgcrypt/libgcrypt.hash
index 736332d3505c..dce6522959da 100644
--- a/package/libgcrypt/libgcrypt.hash
+++ b/package/libgcrypt/libgcrypt.hash
@@ -1,6 +1,6 @@
-# From https://www.gnupg.org/download/integrity_check.html
-sha1 ab8aae5d7a68f8e0988f90e11e7f6a4805af5c8d libgcrypt-1.8.2.tar.bz2
+# From https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html
+sha1 13bd2ce69e59ab538e959911dfae80ea309636e3 libgcrypt-1.8.3.tar.bz2
# Locally calculated after checking signature
-# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.2.tar.bz2.sig
-sha256 c8064cae7558144b13ef0eb87093412380efa16c4ee30ad12ecb54886a524c07 libgcrypt-1.8.2.tar.bz2
+# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.3.tar.bz2.sig
+sha256 66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c libgcrypt-1.8.3.tar.bz2
sha256 ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532 COPYING.LIB
diff --git a/package/libgcrypt/libgcrypt.mk b/package/libgcrypt/libgcrypt.mk
index 00e864e836a2..f25944da6455 100644
--- a/package/libgcrypt/libgcrypt.mk
+++ b/package/libgcrypt/libgcrypt.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBGCRYPT_VERSION = 1.8.2
+LIBGCRYPT_VERSION = 1.8.3
LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2
LIBGCRYPT_LICENSE = LGPL-2.1+
LIBGCRYPT_LICENSE_FILES = COPYING.LIB
--
2.17.1
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3
2018-06-15 8:21 [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3 Baruch Siach
@ 2018-06-15 11:17 ` Peter Korsgaard
2018-06-17 15:56 ` Peter Korsgaard
2018-07-17 7:27 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Peter Korsgaard @ 2018-06-15 11:17 UTC (permalink / raw)
To: buildroot
>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:
> Fixes CVE-2018-0495: ECDSA signing side-channel attack.
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3
2018-06-15 8:21 [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3 Baruch Siach
2018-06-15 11:17 ` Peter Korsgaard
@ 2018-06-17 15:56 ` Peter Korsgaard
2018-07-17 7:27 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Peter Korsgaard @ 2018-06-17 15:56 UTC (permalink / raw)
To: buildroot
>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:
> Fixes CVE-2018-0495: ECDSA signing side-channel attack.
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Committed to 2018.02.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3
2018-06-15 8:21 [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3 Baruch Siach
2018-06-15 11:17 ` Peter Korsgaard
2018-06-17 15:56 ` Peter Korsgaard
@ 2018-07-17 7:27 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Peter Korsgaard @ 2018-07-17 7:27 UTC (permalink / raw)
To: buildroot
>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:
> Fixes CVE-2018-0495: ECDSA signing side-channel attack.
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Committed to 2018.05.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2018-07-17 7:27 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-06-15 8:21 [Buildroot] [PATCH] libgcrypt: security bump to version 1.8.3 Baruch Siach
2018-06-15 11:17 ` Peter Korsgaard
2018-06-17 15:56 ` Peter Korsgaard
2018-07-17 7:27 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.