kumquat-buildroot/package/libgcrypt/libgcrypt.hash

# From https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html
sha1 2d8781e92f88706707a1e76fb628b499ad538a30  libgcrypt-1.8.5.tar.bz2
# Locally calculated after checking signature
# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.5.tar.bz2.sig
# using key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
sha256  3b4a2a94cb637eff5bdebbcaf46f4d95c4f25206f459809339cdada0eb577ac3  libgcrypt-1.8.5.tar.bz2
sha256  ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532  COPYING.LIB
package/libgcrypt: security bump to version 1.8.5 - Drop second and third patches (alredy in version) - Add mitigation against an ECDSA timing attack. [T4626,CVE-2019-13627] Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-09-22 21:15:53 +02:00			`# From https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html`
			`sha1 2d8781e92f88706707a1e76fb628b499ad538a30 libgcrypt-1.8.5.tar.bz2`
libgcrypt: security bump to version 1.7.8 >From the NEWS file: - Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-06-30 17:04:54 +02:00			`# Locally calculated after checking signature`
package/libgcrypt: security bump to version 1.8.5 - Drop second and third patches (alredy in version) - Add mitigation against an ECDSA timing attack. [T4626,CVE-2019-13627] Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-09-22 21:15:53 +02:00			`# https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.5.tar.bz2.sig`
libgcrypt: bump to version 1.8.4 Drop patch 0001. We patch the configure script directly in patch 0002, and we don't autoreconf. So this patch has no effect (never had). Rename patch 0002. The next version bump should drop this patch as well. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-10-30 12:40:23 +01:00			`# using key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6`
package/libgcrypt: security bump to version 1.8.5 - Drop second and third patches (alredy in version) - Add mitigation against an ECDSA timing attack. [T4626,CVE-2019-13627] Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-09-22 21:15:53 +02:00			`sha256 3b4a2a94cb637eff5bdebbcaf46f4d95c4f25206f459809339cdada0eb577ac3 libgcrypt-1.8.5.tar.bz2`
libgcrypt: bump to version 1.8.2 Add license hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-01-12 11:39:17 +01:00			`sha256 ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532 COPYING.LIB`