From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] libgcrypt: Update to version 1.12.3
Date: Tue, 8 Sep 2026 21:52:38 +0200 [thread overview]
Message-ID: <20260908195241.2909132-12-adolf.belka@ipfire.org> (raw)
In-Reply-To: <20260908195241.2909132-1-adolf.belka@ipfire.org>
- Update from version 1.12.2 to 1.12.3
- Update of rootfile
- Changelog
1.12.3
* Bug fixes:
- Avoid theoretical drive-by loading of netapi32.dll and
shell32.dll. [T8375]
- Validate hash algorithm for use with RSA modulus. [T8376]
- Validate parameters of Balloon KDF. [T8374,T8383]
- Validate parallelism of Argon2 KDF. [T8373,T8382]
- Fix parsing quoted parts and CRLF/LFCR in s-expression. [T8371]
- Support BUFLEN check for GCRYMPI_FMT_SSH. [T8371]
- Fix RSA PSS verify message length checking. [rC0d64fc228f]
- Avoid a NULL ptr deref due to a unsupported genkey flag for
ECC. [rC3b259530bc]
- Assert 32 KiB input cap in gcm_ctr_encrypt. [T8387]
- Fix assertion failure in OCB when a buffered block becomes block
65536. [TT8389]
- Fix OOB read in IMIT MAC verify of GOST28147. [T8388]
- Fix CMAC block-count truncation for 64 GiB writes. [T8384]
- Fix AEAD spurious byte-counter carry for 4 GiB adds. [T8381]
- Validate all KEM input lengths. [T8259]
- Add length check of DATALEN when parsing s-expression. [T8267]
- Only accept canonical value for S with EdDSA. [T8386]
- Only accept canonical signatures for RSA. [T8392]
- Fix an assertion failure for invalid small-order Ed25519 public
keys. [T8380]
- Validate length of supplied receiver public-key length in DHKEM
decapsulation. [T8385]
- Use a more strict value for the PKCS#1 minimal frame length.
[T8393,T8394]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libgcrypt | 2 +-
lfs/libgcrypt | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 5dc013833..1825a29bf 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
#usr/lib/libgcrypt.la
#usr/lib/libgcrypt.so
usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.7.2
+usr/lib/libgcrypt.so.20.8.8
#usr/lib/pkgconfig/libgcrypt.pc
#usr/share/aclocal/libgcrypt.m4
#usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 75ef9e8ff..f574c63db 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@
include Config
-VER = 1.12.2
+VER = 1.12.3
THISAPP = libgcrypt-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd
+$(DL_FILE)_BLAKE2 = 52043c1defdbaf3ed0618bfbac13f4186dd28a4b2507a93bc24f08a7b2e66bb77014ff875801a3e39fcfbc905224f6ff1bcee43dcd53c555c32940305cfa92fe
install : $(TARGET)
--
2.55.0
next prev parent reply other threads:[~2026-09-08 19:52 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-08 19:52 [PATCH] abseil-cpp: Update to version 20260817.0 Adolf Belka
2026-09-08 19:52 ` [PATCH] core205: Ship elfutils Adolf Belka
2026-09-08 19:52 ` [PATCH] core205: Ship iproute2 Adolf Belka
2026-09-08 19:52 ` [PATCH] core205: Ship libcap-ng Adolf Belka
2026-09-08 19:52 ` [PATCH] core205: Ship libgcrypt Adolf Belka
2026-09-08 19:52 ` [PATCH] core205: Ship openssl Adolf Belka
2026-09-08 19:52 ` [PATCH] elfutils: Update to version 0.196 Adolf Belka
2026-09-08 19:52 ` [PATCH] expat: Update to version 2.8.4 Adolf Belka
2026-09-08 19:52 ` [PATCH] harfbuzz: Update to version 14.4.0 Adolf Belka
2026-09-08 19:52 ` [PATCH] iproute2: Update to version 7.2.0 Adolf Belka
2026-09-08 19:52 ` [PATCH] libcap-ng: Update to version 0.9.5 Adolf Belka
2026-09-08 19:52 ` Adolf Belka [this message]
2026-09-08 19:52 ` [PATCH] meson: Update to version 1.12.0 Adolf Belka
2026-09-08 19:52 ` [PATCH] openssl: Update to version 3.6.4 Adolf Belka
2026-09-08 19:52 ` [PATCH] protobuf: Update to version 36.1 Adolf Belka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260908195241.2909132-12-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox