buildroot/package/libgcrypt, branch 2019.02-op-build

libgcrypt: bump to version 1.8.4

2018-11-01T12:55:13+00:00

Drop patch 0001. We patch the configure script directly in patch 0002, and we don't autoreconf. So this patch has no effect (never had). Rename patch 0002. The next version bump should drop this patch as well. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.8.3

2018-06-15T11:16:06+00:00

Fixes CVE-2018-0495: ECDSA signing side-channel attack. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

libgcrypt: bump to version 1.8.2

2018-01-12T18:53:49+00:00

Add license hash. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

package/libgcrypt: bump version to 1.8.1

2017-09-17T16:31:08+00:00

Added sha1 hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.7.9

2017-08-30T20:08:21+00:00

Fixes CVE-2017-0379: Mitigate a local side-channel attack on Curve25519 dubbed "May the Fourth be With You". As we are close to release, don't update to the latest 1.8.1 version, but to a maintenance release from the 1.7 branch. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.7.8

2017-07-01T08:09:54+00:00

>From the NEWS file: - Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see . [CVE-2017-7526] Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libgcrypt: security bump to version 1.7.7

2017-06-06T15:18:32+00:00

Fix possible timing attack on EdDSA session key. https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000406.html Add upstream provided SHA1 hash. Switch to https download for better corporate firewall compatibility. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+

2017-04-01T13:18:10+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

package/libgcrypt: bump to version 1.7.6

2017-01-27T12:10:06+00:00

No announcement was made for this version, so the hash was calculated locally. Signed-off-by: Jörg Krause Signed-off-by: Peter Korsgaard

libgcrypt: bump to version 1.7.5

2016-12-30T20:12:36+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard