mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
627c482434
Release notes: https://lists.gnupg.org/pipermail/gnupg-announce/2026q3/000508.html Contains a number of bugfixes, some of which may have (low severity) security impact. As stated by Werner Koch: All in all we received 26 reports alone from ANSSI but as even the reporter mentioned, the real world attack severity is not critical. Thus we don't consider 1.12.3 a security fix release. There are some bugs which should be fixed to avoid crashes, and thus may lead to DoS. However, 16384 bit RSA keys can also be used for a practical DoS; it all depends on your use case. https://www.openwall.com/lists/oss-security/2026/08/31/11 Added upstream patch to fix a build error introduced by this bump that was detected by the Gitlab pipelines: sm4-intel-avx512-amd64.S: Assembler messages: sm4-intel-avx512-amd64.S:138: Error: operand size mismatch for `vsm4rnds4' Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Julien: add extra info in commit log from Peter original submission from https://lore.kernel.org/buildroot/20260901192724.1021544-1-peter@korsgaard.com/ ] Signed-off-by: Julien Olivain <ju.o@free.fr>
42 lines
1.2 KiB
Makefile
42 lines
1.2 KiB
Makefile
################################################################################
|
|
#
|
|
# libgcrypt
|
|
#
|
|
################################################################################
|
|
|
|
LIBGCRYPT_VERSION = 1.12.3
|
|
LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2
|
|
LIBGCRYPT_LICENSE = LGPL-2.1+
|
|
LIBGCRYPT_LICENSE_FILES = COPYING.LIB
|
|
LIBGCRYPT_SITE = https://gnupg.org/ftp/gcrypt/libgcrypt
|
|
LIBGCRYPT_INSTALL_STAGING = YES
|
|
LIBGCRYPT_DEPENDENCIES = libgpg-error
|
|
LIBGCRYPT_CONFIG_SCRIPTS = libgcrypt-config
|
|
LIBGCRYPT_CPE_ID_VENDOR = gnupg
|
|
|
|
# Patching configure.ac and Makefile.am in 0001
|
|
LIBGCRYPT_AUTORECONF = YES
|
|
LIBGCRYPT_CONF_ENV += GPGRT_CONFIG=$(STAGING_DIR)/usr/bin/gpgrt-config
|
|
LIBGCRYPT_CONF_OPTS = \
|
|
--disable-tests \
|
|
$(if $(BR2_OPTIMIZE_0),--disable-ppc-crypto-support,) \
|
|
--with-gpg-error-prefix=$(STAGING_DIR)/usr
|
|
|
|
# disable asm for broken archs
|
|
ifeq ($(BR2_i386)$(BR2_m68k_cf),y)
|
|
LIBGCRYPT_CONF_OPTS += --disable-asm
|
|
endif
|
|
|
|
# Code doesn't build in thumb mode
|
|
ifeq ($(BR2_ARM_INSTRUCTIONS_THUMB),y)
|
|
LIBGCRYPT_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -marm"
|
|
endif
|
|
|
|
HOST_LIBGCRYPT_DEPENDENCIES = host-libgpg-error
|
|
HOST_LIBGCRYPT_CONF_OPTS = \
|
|
--disable-tests \
|
|
--with-gpg-error-prefix=$(HOST_DIR)
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|