From patchwork Tue Sep 8 19:52:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10178 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4hfZNt3mNCz3wwm for ; Tue, 08 Sep 2026 19:53:02 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hfZNr2wkTzMd for ; Tue, 08 Sep 2026 19:53:00 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hfZNm0ZGnz37D5 for ; Tue, 08 Sep 2026 19:52:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hfZNf2lrKz36X0 for ; Tue, 08 Sep 2026 19:52:50 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hfZNd04zyz6t5; Tue, 08 Sep 2026 19:52:48 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1788897169; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=egtSdtsSSGmXybHlvrHYbvAdwpY/RXcaF3zJ7SttQk4=; b=dmGbvbhOruZQAOAyKw9ja2N0KM6vxoNB6g4H4HrnRkc8SdeUTqvz9ipp7Tg5UvmP3iH0DI wH+Qa4zgWxwrw0Cw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1788897169; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=egtSdtsSSGmXybHlvrHYbvAdwpY/RXcaF3zJ7SttQk4=; b=WRSrTNg5T+LEmGsme1kyeAyBQ9PI+yF39lWVfJ/R66wrdnKn5fV4kfDSHGekjnIA6LXTEg dAxmHgCepGWQwvAFDhOnSLv0KiRzeaPTGPMDd8XuNdsOxCG2MarTavI2fpvCPhaBojlZ9c z/eCwLXOe5Xdr3FiGriAK2qkjzC+xG1wBz0a+anGbkx53UN3xf5LscnpnDn+8TC5ryIBv/ J3SHqekTwyCX6R6rtmJBC2o05McBgsT8RfnbdSd7UV+ENybUHsNp97+NgISv8cOUGis/mU PhX9AOaU51UEVA0kkeP/MDyVeX0myTmVgSaA3sRJODGdKlc/ZDawoZZA1u1ogg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libgcrypt: Update to version 1.12.3 Date: Tue, 8 Sep 2026 21:52:38 +0200 Message-ID: <20260908195241.2909132-12-adolf.belka@ipfire.org> In-Reply-To: <20260908195241.2909132-1-adolf.belka@ipfire.org> References: <20260908195241.2909132-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.12.2 to 1.12.3 - Update of rootfile - Changelog 1.12.3 * Bug fixes: - Avoid theoretical drive-by loading of netapi32.dll and shell32.dll. [T8375] - Validate hash algorithm for use with RSA modulus. [T8376] - Validate parameters of Balloon KDF. [T8374,T8383] - Validate parallelism of Argon2 KDF. [T8373,T8382] - Fix parsing quoted parts and CRLF/LFCR in s-expression. [T8371] - Support BUFLEN check for GCRYMPI_FMT_SSH. [T8371] - Fix RSA PSS verify message length checking. [rC0d64fc228f] - Avoid a NULL ptr deref due to a unsupported genkey flag for ECC. [rC3b259530bc] - Assert 32 KiB input cap in gcm_ctr_encrypt. [T8387] - Fix assertion failure in OCB when a buffered block becomes block 65536. [TT8389] - Fix OOB read in IMIT MAC verify of GOST28147. [T8388] - Fix CMAC block-count truncation for 64 GiB writes. [T8384] - Fix AEAD spurious byte-counter carry for 4 GiB adds. [T8381] - Validate all KEM input lengths. [T8259] - Add length check of DATALEN when parsing s-expression. [T8267] - Only accept canonical value for S with EdDSA. [T8386] - Only accept canonical signatures for RSA. [T8392] - Fix an assertion failure for invalid small-order Ed25519 public keys. [T8380] - Validate length of supplied receiver public-key length in DHKEM decapsulation. [T8385] - Use a more strict value for the PKCS#1 minimal frame length. [T8393,T8394] Signed-off-by: Adolf Belka --- config/rootfiles/common/libgcrypt | 2 +- lfs/libgcrypt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt index 5dc013833..1825a29bf 100644 --- a/config/rootfiles/common/libgcrypt +++ b/config/rootfiles/common/libgcrypt @@ -5,7 +5,7 @@ #usr/lib/libgcrypt.la #usr/lib/libgcrypt.so usr/lib/libgcrypt.so.20 -usr/lib/libgcrypt.so.20.7.2 +usr/lib/libgcrypt.so.20.8.8 #usr/lib/pkgconfig/libgcrypt.pc #usr/share/aclocal/libgcrypt.m4 #usr/share/info/gcrypt.info diff --git a/lfs/libgcrypt b/lfs/libgcrypt index 75ef9e8ff..f574c63db 100644 --- a/lfs/libgcrypt +++ b/lfs/libgcrypt @@ -24,7 +24,7 @@ include Config -VER = 1.12.2 +VER = 1.12.3 THISAPP = libgcrypt-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd +$(DL_FILE)_BLAKE2 = 52043c1defdbaf3ed0618bfbac13f4186dd28a4b2507a93bc24f08a7b2e66bb77014ff875801a3e39fcfbc905224f6ff1bcee43dcd53c555c32940305cfa92fe install : $(TARGET)