[OE-core] [PATCH 2/2] libgcrypt: upgrade to 1.7.8

Ross Burton ross.burton at intel.com
Wed Jul 19 13:25:53 UTC 2017


Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed
"Sliding right into disaster"'.

Signed-off-by: Ross Burton <ross.burton at intel.com>
---
 .../libgcrypt/{libgcrypt_1.7.7.bb => libgcrypt_1.7.8.bb}              | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-support/libgcrypt/{libgcrypt_1.7.7.bb => libgcrypt_1.7.8.bb} (92%)

diff --git a/meta/recipes-support/libgcrypt/libgcrypt_1.7.7.bb b/meta/recipes-support/libgcrypt/libgcrypt_1.7.8.bb
similarity index 92%
rename from meta/recipes-support/libgcrypt/libgcrypt_1.7.7.bb
rename to meta/recipes-support/libgcrypt/libgcrypt_1.7.8.bb
index 7f7d852fb3b..83351594ea1 100644
--- a/meta/recipes-support/libgcrypt/libgcrypt_1.7.7.bb
+++ b/meta/recipes-support/libgcrypt/libgcrypt_1.7.8.bb
@@ -21,8 +21,8 @@ SRC_URI = "${GNUPG_MIRROR}/libgcrypt/libgcrypt-${PV}.tar.gz \
            file://fix-ICE-failure-on-mips-with-option-O-and-g.patch \
            file://fix-undefined-reference-to-pthread.patch \
 "
-SRC_URI[md5sum] = "36ace8f8dc4b1a82793ae759bbfc806f"
-SRC_URI[sha256sum] = "0e72e91290d553c303095a50ea660279d8f11b76c6c86e826f470442fcdf1edd"
+SRC_URI[md5sum] = "5588b89b75b1353e2454b04c7b8368f3"
+SRC_URI[sha256sum] = "cb076b2efc7ba752f3d4c663c9ee0589a98b1d614fe90878b1facd607a45fd43"
 
 BINCONFIG = "${bindir}/libgcrypt-config"
 
-- 
2.11.0




More information about the Openembedded-core mailing list