<feed xmlns='http://www.w3.org/2005/Atom'>
<title>pkgsrc/security/libgcrypt, branch trunk</title>
<subtitle>[no description]</subtitle>
<id>https://git.osdyson.ru/mirror/pkgsrc/atom?h=trunk</id>
<link rel='self' href='https://git.osdyson.ru/mirror/pkgsrc/atom?h=trunk'/>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/'/>
<updated>2022-09-18T08:50:59Z</updated>
<entry>
<title>Add missing pkg-config override for libgcrypt</title>
<updated>2022-09-18T08:50:59Z</updated>
<author>
<name>nros</name>
<email>nros@pkgsrc.org</email>
</author>
<published>2022-09-18T08:50:59Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=a14ccaf228a64dfed503727fdec71dc62fe5025d'/>
<id>urn:sha1:a14ccaf228a64dfed503727fdec71dc62fe5025d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fix usage of -O and -Oz compiling options</title>
<updated>2022-09-18T08:42:45Z</updated>
<author>
<name>nros</name>
<email>nros@pkgsrc.org</email>
</author>
<published>2022-09-18T08:42:45Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=58995dd0d3681bbd4bc1933603ff74ffb15ac357'/>
<id>urn:sha1:58995dd0d3681bbd4bc1933603ff74ffb15ac357</id>
<content type='text'>
The sed options that clear out optimization
options for rndjent.c, that must be compiled
without optimization, did not take away -O
as reported by Jason Bacon on pkgsrc-users.
While here also make it take away the -Oz
optimization option supported by gcc 12
and later.</content>
</entry>
<entry>
<title>libgcrypt: updated to 1.10.1</title>
<updated>2022-03-29T07:16:00Z</updated>
<author>
<name>adam</name>
<email>adam@pkgsrc.org</email>
</author>
<published>2022-03-29T07:16:00Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=dfaa87631786a190bdfd18441c2c9669a2175495'/>
<id>urn:sha1:dfaa87631786a190bdfd18441c2c9669a2175495</id>
<content type='text'>
Noteworthy changes in version 1.10.1 (2022-03-28)
-------------------------------------------------

 * Bug fixes:
   - Fix minor memory leaks in FIPS mode.
   - Build fixes for MUSL libc.

 * Other:
   - More portable integrity check in FIPS mode.
   - Add X9.62 OIDs to sha256 and sha512 modules.</content>
</entry>
<entry>
<title>libgcrypt: update to 1.10.0.</title>
<updated>2022-02-15T09:30:16Z</updated>
<author>
<name>wiz</name>
<email>wiz@pkgsrc.org</email>
</author>
<published>2022-02-15T09:30:16Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=dc76ebbc29697adbb6e85e255446c0e72d527259'/>
<id>urn:sha1:dc76ebbc29697adbb6e85e255446c0e72d527259</id>
<content type='text'>
Noteworthy changes in version 1.10.0 (2022-02-01)  [C24/A4/R0]
-------------------------------------------------

 * New and extended interfaces:

   - New control codes to check for FIPS 140-3 approved algorithms.

   - New control code to switch into non-FIPS mode.

   - New cipher modes SIV and GCM-SIV as specified by RFC-5297.

   - Extended cipher mode AESWRAP with padding as specified by
     RFC-5649.  [T5752]

   - New set of KDF functions.

   - New KDF modes Argon2 and Balloon.

   - New functions for combining hashing and signing/verification.  [T4894]

 * Performance:

   - Improved support for PowerPC architectures.

   - Improved ECC performance on zSeries/s390x by using accelerated
     scalar multiplication.

   - Many more assembler performance improvements for several
     architectures.

 * Bug fixes:

   - Fix Elgamal encryption for other implementations.
     [R5328,CVE-2021-40528]

   - Fix alignment problem on macOS.  [T5440]

   - Check the input length of the point in ECDH.  [T5423]

   - Fix an abort in gcry_pk_get_param for "Curve25519".  [T5490]

 * Other features:

   - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored
     because it is useless with the FIPS 140-3 related changes.

   - Update of the jitter entropy RNG code.  [T5523]

   - Simplification of the entropy gatherer when using the getentropy
     system call.</content>
</entry>
<entry>
<title>security: Replace RMD160 checksums with BLAKE2s checksums</title>
<updated>2021-10-26T11:16:56Z</updated>
<author>
<name>nia</name>
<email>nia@pkgsrc.org</email>
</author>
<published>2021-10-26T11:16:56Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=b6556c8dd072caa80e824c2101f33098b7b0ecb7'/>
<id>urn:sha1:b6556c8dd072caa80e824c2101f33098b7b0ecb7</id>
<content type='text'>
All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2</content>
</entry>
<entry>
<title>security: Remove SHA1 hashes for distfiles</title>
<updated>2021-10-07T14:53:40Z</updated>
<author>
<name>nia</name>
<email>nia@pkgsrc.org</email>
</author>
<published>2021-10-07T14:53:40Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=690d4f45145849621b8c10f4936cf0ffcc5bb32d'/>
<id>urn:sha1:690d4f45145849621b8c10f4936cf0ffcc5bb32d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>libgcrypt: update to 1.9.4.</title>
<updated>2021-08-30T15:53:43Z</updated>
<author>
<name>wiz</name>
<email>wiz@pkgsrc.org</email>
</author>
<published>2021-08-30T15:53:43Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=0a951e5edf8fa04362cf4a1f6e649dd32f9c0369'/>
<id>urn:sha1:0a951e5edf8fa04362cf4a1f6e649dd32f9c0369</id>
<content type='text'>
Noteworthy changes in version 1.9.4 (2021-08-22)  [C23/A3/R4]
------------------------------------------------

 * Bug fixes:

   - Fix Elgamal encryption for other implementations.
     [#5328,CVE-2021-33560]

   - Fix alignment problem on macOS.  [#5440]

   - Check the input length of the point in ECDH.  [#5423]

   - Fix an abort in gcry_pk_get_param for "Curve25519".  [#5490]

 * Other features:

   - Add GCM and CCM to OID mapping table for AES. [a83fb13a3b]</content>
</entry>
<entry>
<title>build fix for NetBSD-8/m68k which calls itself netbsdelf</title>
<updated>2021-06-19T11:17:53Z</updated>
<author>
<name>spz</name>
<email>spz@pkgsrc.org</email>
</author>
<published>2021-06-19T11:17:53Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=16f2cb06ba4c29ed8b241137824f5c0877de7fab'/>
<id>urn:sha1:16f2cb06ba4c29ed8b241137824f5c0877de7fab</id>
<content type='text'>
</content>
</entry>
<entry>
<title>libgcrypt: updated to 1.9.3</title>
<updated>2021-04-21T08:28:31Z</updated>
<author>
<name>adam</name>
<email>adam@pkgsrc.org</email>
</author>
<published>2021-04-21T08:28:31Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=30da4573e41899b7eddc3094147498a6cf605a33'/>
<id>urn:sha1:30da4573e41899b7eddc3094147498a6cf605a33</id>
<content type='text'>
Noteworthy changes in version 1.9.3 (2021-04-19)
------------------------------------------------

 * Bug fixes:
   - Fix build problems on i386 using gcc-4.7.
   - Fix checksum calculation in OCB decryption for AES on s390.
   - Fix a regression in gcry_mpi_ec_add related to certain usages of
     curve 25519.
   - Fix a symbol not found problem on Apple M1.
   - Fix for Apple iOS getentropy peculiarity.
   - Make keygrip computation work for compressed points.

* Performance:
   - Add x86_64 VAES/AVX2 accelerated implementation of Camellia.
   - Add x86_64 VAES/AVX2 accelerated implementation of AES.
   - Add VPMSUMD acceleration for GCM mode on PPC.

 * Internal changes.
   - Harden MPI conditional code against EM leakage.
   - Harden Elgamal by introducing exponent blinding.
   - Fix memory leaks in the error code paths of EdDSA.</content>
</entry>
<entry>
<title>PR pkg/56100: security/libgcrypt fails on NetBSD/m68k</title>
<updated>2021-04-13T17:38:12Z</updated>
<author>
<name>dholland</name>
<email>dholland@pkgsrc.org</email>
</author>
<published>2021-04-13T17:38:12Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=659979c4e087d9d76b4f91f8e6054aa9cec7a0ff'/>
<id>urn:sha1:659979c4e087d9d76b4f91f8e6054aa9cec7a0ff</id>
<content type='text'>
Extend the m68k assembler syntax probe to recognize NetBSD targets.</content>
</entry>
</feed>
