diff options
| author | Baruch Siach <baruch@tkos.co.il> | 2017-06-05 23:26:04 +0300 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2017-06-06 17:18:32 +0200 |
| commit | 869c8dfd7bd37bd11a903cadf065a1963fb8f887 (patch) | |
| tree | 44939a4c2b936f935fceb9effbe497dfd726a338 /package/libgcrypt/libgcrypt.hash | |
| parent | b305185495087c2c5c28fd01a9e48b535640791a (diff) | |
| download | buildroot-869c8dfd7bd37bd11a903cadf065a1963fb8f887.tar.gz buildroot-869c8dfd7bd37bd11a903cadf065a1963fb8f887.zip | |
libgcrypt: security bump to version 1.7.7
Fix possible timing attack on EdDSA session key.
https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000406.html
Add upstream provided SHA1 hash.
Switch to https download for better corporate firewall compatibility.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libgcrypt/libgcrypt.hash')
| -rw-r--r-- | package/libgcrypt/libgcrypt.hash | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/package/libgcrypt/libgcrypt.hash b/package/libgcrypt/libgcrypt.hash index 48bbd6af54..5a833d59e6 100644 --- a/package/libgcrypt/libgcrypt.hash +++ b/package/libgcrypt/libgcrypt.hash @@ -1,2 +1,4 @@ +# From https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000406.html +sha1 ea4ae1a4dba51f15095319419d7b42a0bf160384 libgcrypt-1.7.7.tar.bz2 # Locally calculated -sha256 626aafee84af9d2ce253d2c143dc1c0902dda045780cc241f39970fc60be05bc libgcrypt-1.7.6.tar.bz2 +sha256 b9b85eba0793ea3e6e66b896eb031fa05e1a4517277cc9ab10816b359254cd9a libgcrypt-1.7.7.tar.bz2 |
