linux/poky.git/meta/recipes-support/libgcrypt, branch zeus

libgcrypt: Fix determinism issue

2020-02-11T23:05:13+00:00

The build was injection git information from the wrong git tree, stop this to allow reproducible builds. (From OE-Core rev: 506b36b6d86b3454fcc3cb85f6229cbe8d14f5b5) (From OE-Core rev: 2b68ffc6d7c45541958f1b0c0b9ca9e39064e096) (From OE-Core rev: cd2e778771d836e04f76a0ff283c250dc19372c6) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libgcrypt: fix CVE-2019-13627

2019-11-13T22:02:15+00:00

Backport two fixes for CVE-2019-13627 from upstream to zeus. (From OE-Core rev: 3361760dbb46cca2e00f053286404b5df39590b3) Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libgcrypt: fix CVE-2019-12904

2019-10-29T09:08:18+00:00

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-12904 Patches from: https://github.com/gpg/libgcrypt/commit/1374254c2904ab5b18ba4a890856824a102d4705 https://github.com/gpg/libgcrypt/commit/daedbbb5541cd8ecda1459d3b843ea4d92788762 https://github.com/gpg/libgcrypt/commit/a4c561aab1014c3630bc88faf6f5246fee16b020 (From OE-Core rev: 757f2d50d7cd194e5f734a24e68d8f0da98b38f8) Signed-off-by: Yi Zhao Signed-off-by: Ross Burton (cherry picked from commit 37e390ff05b6a4509019db358ed496731d80cc51) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libgcrypt: upgrade 1.8.3 -> 1.8.4

2018-11-23T23:35:19+00:00

(From OE-Core rev: 1100e7f1519be91c90b139c337799c7ea635a8b3) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

libgcrypt: Add the LICENSES file to LIC_FILES_CHKSUM

2018-10-09T18:04:02+00:00

The LICENSES file contains references to source files with other licenses than GPL/LGPL that stipulate that they shall be mentioned in any documentation accompanying a product including this library. License-Update: Add missing LICENSES file (From OE-Core rev: 67bc0b3babd922c800a03c1370d6d33a75f273c1) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libgcrypt: 1.8.2 -> 1.8.3

2018-07-03T23:02:16+00:00

(From OE-Core rev: c15a7f739a929c3f43f17387c5a950c9d6a02203) Signed-off-by: Hongxu Jia Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libcrypt: remove unused patch file

2018-01-30T11:50:12+00:00

(From OE-Core rev: cd34a6dc9f0507ed3514c7fb333b313a0b0590c2) Signed-off-by: Juro Bystricky Signed-off-by: Richard Purdie

libgcrypt: upgrade to 1.8.2

2018-01-11T10:26:07+00:00

(From OE-Core rev: e84d96a1cd82333b290942b095b4a9a4457b444e) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libgcrypt: update from version 1.8.0 to 1.8.1

2017-11-05T22:33:20+00:00

Update libgcrypt version from 1.8.0 to 1.8.1. (From OE-Core rev: b26d1dc8767cd0a34da47a8eb3ab001cc86cd8cc) Signed-off-by: Jussi Laako Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: Fix building on armv6

2017-10-16T22:52:43+00:00

This patch is backported from the upstream git repository to fix building libgcrypt on armv6 platforms such as raspberrypi. (From OE-Core rev: c47ed9aa7a34ef62b3ffaea6ebd5cc9e7c052899) Signed-off-by: Paul Barker Signed-off-by: Ross Burton Signed-off-by: Richard Purdie