{"id":807695,"url":"http://patchwork.ozlabs.org/api/patches/807695/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/162b5a636bb13959aa40bd3ccc1479b9228bfa75.1504109223.git.baruch@tkos.co.il/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<162b5a636bb13959aa40bd3ccc1479b9228bfa75.1504109223.git.baruch@tkos.co.il>","list_archive_url":null,"date":"2017-08-30T16:07:03","name":"libgcrypt: security bump to version 1.7.9","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"05743cd4c0f7e2c4387fce54edbefa035d37bb24","submitter":{"id":1458,"url":"http://patchwork.ozlabs.org/api/people/1458/?format=json","name":"Baruch Siach","email":"baruch@tkos.co.il"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/162b5a636bb13959aa40bd3ccc1479b9228bfa75.1504109223.git.baruch@tkos.co.il/mbox/","series":[{"id":643,"url":"http://patchwork.ozlabs.org/api/series/643/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=643","date":"2017-08-30T16:07:03","name":"libgcrypt: security bump to version 1.7.9","version":1,"mbox":"http://patchwork.ozlabs.org/series/643/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/807695/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/807695/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.136; helo=silver.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=)","Received":["from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xj9Pm0K9xz9sN5\n\tfor ;\n\tThu, 31 Aug 2017 02:07:23 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby silver.osuosl.org (Postfix) with ESMTP id C13E52D309;\n\tWed, 30 Aug 2017 16:07:18 +0000 (UTC)","from silver.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id NblxGaG-NIZ9; Wed, 30 Aug 2017 16:07:16 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby silver.osuosl.org (Postfix) with ESMTP id 648EF2CFCC;\n\tWed, 30 Aug 2017 16:07:16 +0000 (UTC)","from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\tby ash.osuosl.org (Postfix) with ESMTP id 930551C01CA\n\tfor ;\n\tWed, 30 Aug 2017 16:07:15 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id 8DD2B87863\n\tfor ;\n\tWed, 30 Aug 2017 16:07:15 +0000 (UTC)","from whitealder.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id 3u-9KeDBYPBY for ;\n\tWed, 30 Aug 2017 16:07:13 +0000 (UTC)","from mx.tkos.co.il (guitar.tcltek.co.il [192.115.133.116])\n\tby whitealder.osuosl.org (Postfix) with ESMTPS id 3C1E18730A\n\tfor ; Wed, 30 Aug 2017 16:07:13 +0000 (UTC)","from tarshish.tkos.co.il (unknown [10.0.8.6])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128\n\tbits)) (No client certificate requested)\n\tby mx.tkos.co.il (Postfix) with ESMTPSA id 4006D440107;\n\tWed, 30 Aug 2017 19:07:09 +0300 (IDT)"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","From":"Baruch Siach ","To":"buildroot@busybox.net","Date":"Wed, 30 Aug 2017 19:07:03 +0300","Message-Id":"<162b5a636bb13959aa40bd3ccc1479b9228bfa75.1504109223.git.baruch@tkos.co.il>","X-Mailer":"git-send-email 2.14.1","Subject":"[Buildroot] [PATCH] libgcrypt: security bump to version 1.7.9","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","MIME-Version":"1.0","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" "},"content":"Fixes CVE-2017-0379: Mitigate a local side-channel attack on Curve25519\ndubbed \"May the Fourth be With You\".\n\nAs we are close to release, don't update to the latest 1.8.1 version,\nbut to a maintenance release from the 1.7 branch.\n\nSigned-off-by: Baruch Siach \n---\n package/libgcrypt/libgcrypt.hash | 6 ++----\n package/libgcrypt/libgcrypt.mk | 2 +-\n 2 files changed, 3 insertions(+), 5 deletions(-)","diff":"diff --git a/package/libgcrypt/libgcrypt.hash b/package/libgcrypt/libgcrypt.hash\nindex 8ac9f0a92bbc..56a45c5398aa 100644\n--- a/package/libgcrypt/libgcrypt.hash\n+++ b/package/libgcrypt/libgcrypt.hash\n@@ -1,5 +1,3 @@\n-# From https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html\n-sha1 65a4a495aa858483e66868199eaa8238572ca6cd libgcrypt-1.7.8.tar.bz2\n # Locally calculated after checking signature\n-# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.7.8.tar.bz2.sig\n-sha256 948276ea47e6ba0244f36a17b51dcdd52cfd1e664b0a1ac3bc82134fb6cec199 libgcrypt-1.7.8.tar.bz2\n+# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.7.9.tar.bz2.sig\n+sha256 bfe9bb703c1126c3647da2810fd23039c2f09d46969f71612c2065dc3fa9373b libgcrypt-1.7.9.tar.bz2\ndiff --git a/package/libgcrypt/libgcrypt.mk b/package/libgcrypt/libgcrypt.mk\nindex bc194addb384..fe3ac5cfff03 100644\n--- a/package/libgcrypt/libgcrypt.mk\n+++ b/package/libgcrypt/libgcrypt.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-LIBGCRYPT_VERSION = 1.7.8\n+LIBGCRYPT_VERSION = 1.7.9\n LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2\n LIBGCRYPT_LICENSE = LGPL-2.1+\n LIBGCRYPT_LICENSE_FILES = COPYING.LIB\n","prefixes":[]}