diff options
| author | Baruch Siach <baruch@tkos.co.il> | 2017-08-30 19:07:03 +0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2017-08-30 22:08:21 +0200 |
| commit | cd4514109a6bd248d6ca7713d97e3b257ae91c6f (patch) | |
| tree | 3763ee39bf33e0f90cb4db267c193ca677c034e1 /package/libgcrypt | |
| parent | 453ca1d6ad6aa3d55f44734ed8479ac5fa909d8a (diff) | |
| download | buildroot-cd4514109a6bd248d6ca7713d97e3b257ae91c6f.tar.gz buildroot-cd4514109a6bd248d6ca7713d97e3b257ae91c6f.zip | |
libgcrypt: security bump to version 1.7.9
Fixes CVE-2017-0379: Mitigate a local side-channel attack on Curve25519
dubbed "May the Fourth be With You".
As we are close to release, don't update to the latest 1.8.1 version,
but to a maintenance release from the 1.7 branch.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/libgcrypt')
| -rw-r--r-- | package/libgcrypt/libgcrypt.hash | 6 | ||||
| -rw-r--r-- | package/libgcrypt/libgcrypt.mk | 2 |
2 files changed, 3 insertions, 5 deletions
diff --git a/package/libgcrypt/libgcrypt.hash b/package/libgcrypt/libgcrypt.hash index 8ac9f0a92b..56a45c5398 100644 --- a/package/libgcrypt/libgcrypt.hash +++ b/package/libgcrypt/libgcrypt.hash @@ -1,5 +1,3 @@ -# From https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html -sha1 65a4a495aa858483e66868199eaa8238572ca6cd libgcrypt-1.7.8.tar.bz2 # Locally calculated after checking signature -# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.7.8.tar.bz2.sig -sha256 948276ea47e6ba0244f36a17b51dcdd52cfd1e664b0a1ac3bc82134fb6cec199 libgcrypt-1.7.8.tar.bz2 +# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.7.9.tar.bz2.sig +sha256 bfe9bb703c1126c3647da2810fd23039c2f09d46969f71612c2065dc3fa9373b libgcrypt-1.7.9.tar.bz2 diff --git a/package/libgcrypt/libgcrypt.mk b/package/libgcrypt/libgcrypt.mk index bc194addb3..fe3ac5cfff 100644 --- a/package/libgcrypt/libgcrypt.mk +++ b/package/libgcrypt/libgcrypt.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBGCRYPT_VERSION = 1.7.8 +LIBGCRYPT_VERSION = 1.7.9 LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2 LIBGCRYPT_LICENSE = LGPL-2.1+ LIBGCRYPT_LICENSE_FILES = COPYING.LIB |
