linux/poky.git/meta/recipes-support/libgcrypt, branch yocto-3.4.3

libgcrypt: Upgrade 1.9.3 -> 1.9.4

2021-09-21T22:44:08+00:00

Includes a fix for CVE-2021-40528. (From OE-Core rev: 24664297abd3844902fa40c21e4e975d89f40383) Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

libgcrypt: upgrade 1.9.2 -> 1.9.3

2021-06-06T22:16:51+00:00

License-Update: added terms for cipher/cipher-gcm-ppc.c, still under GPL (From OE-Core rev: d28c1f67c447f99313890e68083da61adcc66f74) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes

2021-03-02T20:39:36+00:00

Fixes: [YOCTO #13471] (From OE-Core rev: 6db24928d62aeb093a0e6da6619713eaca57a96f) Signed-off-by: Ida Delphine Signed-off-by: Richard Purdie

libgcrypt: update 1.8.7 -> 1.9.2

2021-03-02T14:15:33+00:00

Drop backports. Add a patch that inserts missing spaces in Makefiles. Drop determinism.patch: upstream has moved the git stuff to an external script, which has a guard that checkes for presence of .git/ in source tree. License-Update: additional source file listed (From OE-Core rev: ad2eae801c7809db3f4830f19efdad78d1a62d59) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libgcrypt: Whitelisted CVEs

2021-02-06T09:03:00+00:00

Whitelisted below CVEs: 1. CVE-2018-12433 Link: https://security-tracker.debian.org/tracker/CVE-2018-12433 Link: https://nvd.nist.gov/vuln/detail/CVE-2018-12433 CVE-2018-12433 is marked disputed and ignored by NVD as it does not impact crypt libraries for any distros and hence, can be safely marked whitelisted. 2. CVE-2018-12438 Link: https://security-tracker.debian.org/tracker/CVE-2018-12438 Link: https://ubuntu.com/security/CVE-2018-12438 CVE-2018-12438 was reported for affecting openjdk crypt libraries but there are no details available on which openjdk versions are affected and does not directly affect libgcrypt or any specific yocto distributions, hence, can be whitelisted. (From OE-Core rev: 2943efe3f56d394308f9364b439c25f6a7613288) Signed-off-by: Saloni Jain Signed-off-by: Richard Purdie

libgcrypt: upgrade 1.8.6 -> 1.8.7

2020-11-03T08:21:12+00:00

(From OE-Core rev: 15f1143ad34586740dd782506ff393c4f3735614) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libgcrypt: upgrade 1.8.5 -> 1.8.6

2020-07-18T10:06:32+00:00

(From OE-Core rev: 260ea206a0729de9c31e8635474188604ef73332) Signed-off-by: Richard Purdie

libgcrypt: Fix determinism issue

2020-02-08T13:20:01+00:00

The build was injection git information from the wrong git tree, stop this to allow reproducible builds. (From OE-Core rev: 506b36b6d86b3454fcc3cb85f6229cbe8d14f5b5) Signed-off-by: Richard Purdie

libgcrypt: upgrade 1.8.4 -> 1.8.5

2019-11-04T13:39:05+00:00

Upgrade libgcrypt. Upstream repo now has a pkg-config feature. The new patch for compatibility with oe-core is a replacement for a patch that added pkg-config as a feature when upstream did not have it. (From OE-Core rev: 53b73a39ae4a4c8db19fb18ef1881033f6b9ff51) Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie