From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Allan Webber Subject: [PATCH] gnu: libgcrypt: Update to 1.6.5. (security update) Date: Tue, 09 Feb 2016 11:52:54 -0800 Message-ID: <87si11y83q.fsf@dustycloud.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50278) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aTELP-0005c7-Od for guix-devel@gnu.org; Tue, 09 Feb 2016 14:53:04 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aTELN-00037L-2Y for guix-devel@gnu.org; Tue, 09 Feb 2016 14:53:03 -0500 Received: from dustycloud.org ([50.116.34.160]:56928) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aTELM-00037D-Tx for guix-devel@gnu.org; Tue, 09 Feb 2016 14:53:00 -0500 Received: from oolong (localhost [127.0.0.1]) by dustycloud.org (Postfix) with ESMTPS id 48A5E26676 for ; Tue, 9 Feb 2016 14:52:55 -0500 (EST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org --=-=-= Content-Type: text/plain Hello all, New security release of libgcrypt: > Hello! > > The GNU project is pleased to announce the availability of Libgcrypt > version 1.6.5. This is a security fix release to mitigate a new side > channel attack. > > Noteworthy changes in version 1.6.5 > =================================== > > * Mitigate side-channel attack on ECDH with Weierstrass curves > [CVE-2015-7511]. See http://www.cs.tau.ac.IL/~tromer/ecdh/ for > details. > > * Fix build problem on Solaris. Here's a patch. It seems to build fine. --=-=-= Content-Type: text/x-patch Content-Disposition: inline; filename=0001-gnu-libgcrypt-Update-to-1.6.5.patch >From f45b192c0e648fea95a98d681d8ecdff3dc15bdb Mon Sep 17 00:00:00 2001 From: Christopher Allan Webber Date: Tue, 9 Feb 2016 11:49:06 -0800 Subject: [PATCH] gnu: libgcrypt: Update to 1.6.5. * gnu/packages/gnupg.scm (libgcrypt): Update to 1.6.5. --- gnu/packages/gnupg.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/gnupg.scm b/gnu/packages/gnupg.scm index a35e8fc..608c437 100644 --- a/gnu/packages/gnupg.scm +++ b/gnu/packages/gnupg.scm @@ -70,14 +70,14 @@ Daemon and possibly more in the future.") (define-public libgcrypt (package (name "libgcrypt") - (version "1.6.4") + (version "1.6.5") (source (origin (method url-fetch) (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-" version ".tar.bz2")) (sha256 (base32 - "09k06gs27gxfha07sa9rpf4xh6mvphj9sky7n09ymx75w9zjrg69")))) + "0959mwfzsxhallxdqlw359xg180ll2skxwyy35qawmfl89cbr7pl")))) (build-system gnu-build-system) (propagated-inputs `(("libgpg-error-host" ,libgpg-error))) -- 2.6.3 --=-=-=--