mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
* [ptxdist] [PATCH] libgcrypt: version bump 1.7.7 -> 1.7.8
@ 2017-07-04 23:50 Clemens Gruber
  0 siblings, 0 replies; 2+ messages in thread
From: Clemens Gruber @ 2017-07-04 23:50 UTC (permalink / raw)
  To: ptxdist; +Cc: Clemens Gruber

Includes an important fix for a (local) RSA side-channel attack.
See CVE-2017-7526 for details.

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 rules/libgcrypt.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libgcrypt.make b/rules/libgcrypt.make
index 4cf147f45..3fff3f379 100644
--- a/rules/libgcrypt.make
+++ b/rules/libgcrypt.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_LIBGCRYPT) += libgcrypt
 #
 # Paths and names
 #
-LIBGCRYPT_VERSION	:= 1.7.7
-LIBGCRYPT_MD5		:= d1769481b1b506a632fd66c5e5f62e41
+LIBGCRYPT_VERSION	:= 1.7.8
+LIBGCRYPT_MD5		:= 34fd2e6d230cbe56799cdf7df05f56c5
 LIBGCRYPT		:= libgcrypt-$(LIBGCRYPT_VERSION)
 LIBGCRYPT_SUFFIX	:= tar.bz2
 LIBGCRYPT_URL		:= http://artfiles.org/gnupg.org/libgcrypt/$(LIBGCRYPT).$(LIBGCRYPT_SUFFIX) ftp://ftp.gnupg.org/gcrypt/libgcrypt/$(LIBGCRYPT).$(LIBGCRYPT_SUFFIX)
-- 
2.13.2


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread
* [ptxdist] [PATCH] libgcrypt: version bump 1.7.7 -> 1.7.8
@ 2017-07-04 21:48 Robert Schwebel
  0 siblings, 0 replies; 2+ messages in thread
From: Robert Schwebel @ 2017-07-04 21:48 UTC (permalink / raw)
  To: ptxdist; +Cc: Robert Schwebel

This fixes CVE-2017-7526.

Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de>
---
 rules/libgcrypt.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libgcrypt.make b/rules/libgcrypt.make
index 4cf147f45..3fff3f379 100644
--- a/rules/libgcrypt.make
+++ b/rules/libgcrypt.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_LIBGCRYPT) += libgcrypt
 #
 # Paths and names
 #
-LIBGCRYPT_VERSION	:= 1.7.7
-LIBGCRYPT_MD5		:= d1769481b1b506a632fd66c5e5f62e41
+LIBGCRYPT_VERSION	:= 1.7.8
+LIBGCRYPT_MD5		:= 34fd2e6d230cbe56799cdf7df05f56c5
 LIBGCRYPT		:= libgcrypt-$(LIBGCRYPT_VERSION)
 LIBGCRYPT_SUFFIX	:= tar.bz2
 LIBGCRYPT_URL		:= http://artfiles.org/gnupg.org/libgcrypt/$(LIBGCRYPT).$(LIBGCRYPT_SUFFIX) ftp://ftp.gnupg.org/gcrypt/libgcrypt/$(LIBGCRYPT).$(LIBGCRYPT_SUFFIX)
-- 
2.13.2


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2017-07-04 23:50 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-07-04 23:50 [ptxdist] [PATCH] libgcrypt: version bump 1.7.7 -> 1.7.8 Clemens Gruber
  -- strict thread matches above, loose matches on Subject: below --
2017-07-04 21:48 Robert Schwebel

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox