linux/poky.git/meta/recipes-support/libgcrypt, branch krogoth-next

libgcrypt: fix CVE-2017-9526

2017-07-19T14:13:47+00:00

In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library. (From OE-Core rev: fb28c54347fcf4957b9b8ee7dee423d859eb7820) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: fix CVE-2017-7526

2017-07-19T14:13:46+00:00

Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster"'. (From OE-Core rev: 1a713fb654a31a6dd218dc1b5b810e2b380ecbb1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: update 1.6.4 -> 1.6.5

2016-02-15T16:28:45+00:00

Noteworthy changes in version 1.6.5 (2016-02-09) [C20/A0/R5] ------------------------------------------------ * Mitigate side-channel attack on ECDH with Weierstrass curves [CVE-2015-7511]. See http://www.cs.tau.ac.IL/~tromer/ecdh/ for details. * Fix build problem on Solaris. (From OE-Core rev: 1146a4bb3af167c75bdea3e75e6f1e80b45cc721) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

libgcrypt: 1.6.3 -> 1.6.4

2016-01-15T11:54:49+00:00

(From OE-Core rev: c6d4581e81460162d6c94dd4136d9675c17a3ab4) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

meta: Fix Upstream-Status statements

2015-09-12T22:01:53+00:00

Fix a variety of problems such as typos, bad punctuations, or incorrect Upstream-Status values. (From OE-Core rev: bd220fe6ce8c3a0805f13a14706d3130ea872604) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: modified the license of dumpsexp.

2015-04-19T12:34:43+00:00

Because dumpsexp.c is GPLv3. So pick up the dumpsexp and modified license to GPLv3. (From OE-Core rev: 18cc7893e453bb10e395ff81dd10c0b5872a1742) Signed-off-by: Lei Maohui Signed-off-by: Richard Purdie

libgcrypt: 1.6.2 -> 1.6.3

2015-04-08T09:53:24+00:00

(From OE-Core rev: 7a5882310a6619a926f047c517fe6fa3f5f32e7a) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

libgcrypt: separate B and S

2015-01-16T23:08:25+00:00

It works well now, and bump the PR to avoid: configure: error: source directory already configured; run "make distclean" there first (From OE-Core rev: 05020b08ecb55f27164c67eda494377e4a70e606) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

libgcrypt: Ugrade to 1.6.2

2014-11-09T10:21:20+00:00

Remove backported patch (From OE-Core rev: a1ebad9242eb3c94505383c4558e4d9476298c5d) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

libgcrypt: Fix ARM assembly when building PIC

2014-09-16T21:14:11+00:00

libgcrypt.so.20 contains .text relocations, backport a patch to fix it. (From OE-Core rev: a81d59bc8d13402725f0f5b42af92332570484d3) Signed-off-by: Jackie Huang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie