libgcrypt: security bump to version 1.8.3
Fixes CVE-2018-0495: ECDSA signing side-channel attack. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
parent
acf255e559
commit
b6543b5fdf
|
@ -1,6 +1,6 @@
|
||||||
# From https://www.gnupg.org/download/integrity_check.html
|
# From https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html
|
||||||
sha1 ab8aae5d7a68f8e0988f90e11e7f6a4805af5c8d libgcrypt-1.8.2.tar.bz2
|
sha1 13bd2ce69e59ab538e959911dfae80ea309636e3 libgcrypt-1.8.3.tar.bz2
|
||||||
# Locally calculated after checking signature
|
# Locally calculated after checking signature
|
||||||
# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.2.tar.bz2.sig
|
# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.3.tar.bz2.sig
|
||||||
sha256 c8064cae7558144b13ef0eb87093412380efa16c4ee30ad12ecb54886a524c07 libgcrypt-1.8.2.tar.bz2
|
sha256 66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c libgcrypt-1.8.3.tar.bz2
|
||||||
sha256 ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532 COPYING.LIB
|
sha256 ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532 COPYING.LIB
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
#
|
#
|
||||||
################################################################################
|
################################################################################
|
||||||
|
|
||||||
LIBGCRYPT_VERSION = 1.8.2
|
LIBGCRYPT_VERSION = 1.8.3
|
||||||
LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2
|
LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2
|
||||||
LIBGCRYPT_LICENSE = LGPL-2.1+
|
LIBGCRYPT_LICENSE = LGPL-2.1+
|
||||||
LIBGCRYPT_LICENSE_FILES = COPYING.LIB
|
LIBGCRYPT_LICENSE_FILES = COPYING.LIB
|
||||||
|
|
Loading…
Reference in a new issue