diff mbox series

libgcrypt: Update to version 1.12.3

Message ID 20260908195241.2909132-12-adolf.belka@ipfire.org
State Staged
Commit 970701e9df54136a6a824dee92811b760a41363f
Headers
Series libgcrypt: Update to version 1.12.3 |

Commit Message

Adolf Belka 8 Sep 2026, 7:52 p.m. UTC 
- Update from version 1.12.2 to 1.12.3
- Update of rootfile
- Changelog
1.12.3
 * Bug fixes:
   - Avoid theoretical drive-by loading of netapi32.dll and
     shell32.dll.  [T8375]
   - Validate hash algorithm for use with RSA modulus.  [T8376]
   - Validate parameters of Balloon KDF.  [T8374,T8383]
   - Validate parallelism of Argon2 KDF.  [T8373,T8382]
   - Fix parsing quoted parts and CRLF/LFCR in s-expression.  [T8371]
   - Support BUFLEN check for GCRYMPI_FMT_SSH.  [T8371]
   - Fix RSA PSS verify message length checking.  [rC0d64fc228f]
   - Avoid a NULL ptr deref due to a unsupported genkey flag for
     ECC.  [rC3b259530bc]
   - Assert 32 KiB input cap in gcm_ctr_encrypt.  [T8387]
   - Fix assertion failure in OCB when a buffered block becomes block
     65536.  [TT8389]
   - Fix OOB read in IMIT MAC verify of GOST28147.  [T8388]
   - Fix CMAC block-count truncation for 64 GiB writes.  [T8384]
   - Fix AEAD spurious byte-counter carry for 4 GiB adds.  [T8381]
   - Validate all KEM input lengths.  [T8259]
   - Add length check of DATALEN when parsing s-expression.  [T8267]
   - Only accept canonical value for S with EdDSA.  [T8386]
   - Only accept canonical signatures for RSA.  [T8392]
   - Fix an assertion failure for invalid small-order Ed25519 public
     keys.  [T8380]
   - Validate length of supplied receiver public-key length in DHKEM
     decapsulation.  [T8385]
   - Use a more strict value for the PKCS#1 minimal frame length.
     [T8393,T8394]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libgcrypt | 2 +-
 lfs/libgcrypt                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 5dc013833..1825a29bf 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@ 
 #usr/lib/libgcrypt.la
 #usr/lib/libgcrypt.so
 usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.7.2
+usr/lib/libgcrypt.so.20.8.8
 #usr/lib/pkgconfig/libgcrypt.pc
 #usr/share/aclocal/libgcrypt.m4
 #usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 75ef9e8ff..f574c63db 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 1.12.2
+VER        = 1.12.3
 
 THISAPP    = libgcrypt-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd
+$(DL_FILE)_BLAKE2 = 52043c1defdbaf3ed0618bfbac13f4186dd28a4b2507a93bc24f08a7b2e66bb77014ff875801a3e39fcfbc905224f6ff1bcee43dcd53c555c32940305cfa92fe
 
 install : $(TARGET)