buildroot/package/libgcrypt, branch 2016.08

libgcrypt: security bump to version to version 1.7.3

2016-08-18T07:18:24+00:00

Fixes CVE-2016-6316: Bug in the mixing functions of Libgcrypt's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

libgcrypt: disable assembly for coldfire

2016-08-05T07:16:45+00:00

Fixes: http://autobuild.buildroot.org/results/374/374158bb0a0e6a16af5d0b909cd05ec52812aaa3/ Signed-off-by: Waldemar Brodkorb Signed-off-by: Peter Korsgaard

libgcrypt: bump version to 1.7.2

2016-07-15T12:29:35+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

package/libgpg-error: bump to version 1.23

2016-07-04T20:22:27+00:00

This patch is based on a patch sent by Vicente Olivert Riera and commented by Arnout Vandecappelle [1]. - Bump version to 1.23 - Add a hook to fix cross-compilation - Fix license and license files - Remove patch applied upstream - Add a BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS variable - Propagate the dependencies using that variable: * package/cppcms * package/crda * package/gnupg2 - package/gcr - package/midori * package/kodi * package/libaacs * package/libassuan * package/libgcrypt * package/libgpgme * package/libksba * package/libmicrohttpd - package/janus-gateway - package/kodi - package/ola - package/systemd * package/libssh * package/libssh2 - package/php-ssh2 * package/netatalk * package/network-manager * package/ntfs-3g * package/opkg * package/php-gnupg * package/rng-tools * package/strongswan * package/vpnc [1] http://patchwork.ozlabs.org/patch/416427/ Cc: Arnout Vandecappelle Cc: Vicente Olivert Riera Signed-off-by: Jörg Krause [Thomas: - rebase on master - changing systemd no longer needed, as it no longer selects libgcrypt.] Signed-off-by: Thomas Petazzoni [Maxime: - rebase on master - bump to new version - propagate dependencies to missing packages] Signed-off-by: Maxime Hadjinlian Reviewed-by: Romain Naour [Thomas: - fix hash file. - change the way to handle the various arch so that it works properly for uClibc. - add nios2 arch support. - Maxime Hadjinlian learned some basic Emacs-fu to do the final fixups of this commit.] Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.6.5

2016-02-11T22:09:12+00:00

Fixes: CVE-2015-7511 - Mitigate side-channel attack on ECDH with Weierstrass curves. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libgcrypt: bump version to 1.6.4

2015-09-11T17:49:04+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

libgcrypt: allow optimization

2015-05-31T08:22:28+00:00

Drop the --disable-optimization option, which makes the libgcrypt configure remove buildroot's optimization setting passed in from CFLAGS. Signed-off-by: Danomi Manchego Signed-off-by: Thomas Petazzoni

packages: indentation cleanup

2015-03-31T11:57:41+00:00

This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.6.3

2015-02-28T12:03:54+00:00

Fixes: CVE-2014-3591 - Use ciphertext blinding for Elgamal decryption CVE-2015-0837 - Fixed data-dependent timing variations in modular exponentiation. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

package/*: rename patches according to the new policy

2015-02-03T13:52:56+00:00

Autogenerated from rename-patch.py (http://patchwork.ozlabs.org/patch/403345) Signed-off-by: Samuel Martin Signed-off-by: Peter Korsgaard