From patchwork Sat Aug 29 05:44:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 96765 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 97840C61DD6 for ; Sat, 29 Aug 2026 05:44:16 +0000 (UTC) Received: from a27-29.smtp-out.us-west-2.amazonses.com (a27-29.smtp-out.us-west-2.amazonses.com [54.240.27.29]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.2183.1787982254753116736 for ; Fri, 28 Aug 2026 22:44:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=GkO9o//t; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=BQbGGNvK; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.29, mailfrom: 010101a04c0c0f7f-2c646210-62ed-4099-9cc7-63e59b699f21-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1787982254; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=YaM35DgtwKCozsIOjVz+T3d5GIDgDSvO/vJLh+EZlIA=; b=GkO9o//tqt3lKX8SF10E+V9w79ZM2sikjxzOdgiwmjicl+5jFpj/DESGTEi7M1po IT0jAiW81VOvfa74r9QD4tYweYdTxsohlhJIZ9Kls1dI68MwI3IKdABK9Cvv0BhS09F /My2yGQfR9AL5RntKzKK1qAIJp3voVvzg44xqbQg= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1787982254; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=YaM35DgtwKCozsIOjVz+T3d5GIDgDSvO/vJLh+EZlIA=; b=BQbGGNvKNYRRa/qrV2VqGY5/9SrFOWKBaG4SSh2PS58AqJ7Ab6mGLwjPoF0X5lwe 7KirEhXVi/8f9BN3T8S28opBNgLKlD3vm/CjDTCiKZFFWFJVco6NoqRe8sWT8fj1sAe TTdYa9EVa+cWuMKqFWtZu5gmKq2uTFykHTa6tcGE= MIME-Version: 1.0 From: auh@yoctoproject.org To: Hongxu Jia Cc: openembedded-core@lists.openembedded.org Subject: [AUH] libgcrypt: upgrading to 1.12.3 SUCCEEDED Message-ID: <010101a04c0c0f7f-2c646210-62ed-4099-9cc7-63e59b699f21-000000@us-west-2.amazonses.com> Date: Sat, 29 Aug 2026 05:44:13 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.08.29-54.240.27.29 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 29 Aug 2026 05:44:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/244629 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libgcrypt* to *1.12.3* has Succeeded. Next steps: - apply the patch: git am 0001-libgcrypt-upgrade-1.12.2-1.12.3.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 590185b4aac59d3bdd2c8dbca72b788c7b6644fd Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sat, 29 Aug 2026 05:40:50 +0000 Subject: [PATCH] libgcrypt: upgrade 1.12.2 -> 1.12.3 Source: ChangeLog 2026-08-26 Werner Koch Release 1.12.3. + commit a4bccd238c9f972af1abaa4b99967e4181eccfd1 * configure.ac: Bump LT version to C28/A8/R0. 2026-08-25 NIIBE Yutaka cipher:rsa:pkcs1: Reject shorter PS on decryption. + commit 0729bf7214c63462bfb433732e6d65527d0dc615 * cipher/rsa-common.c (_gcry_rsa_pkcs1_decode_for_enc): Validate the length of PS. cipher:rsa:pkcs1: Fix the condition of frame length. + commit 2ef95711d898d65609c232f4f61e38efd066a7bd * cipher/rsa-common.c (_gcry_rsa_pkcs1_encode_for_enc): Fix the validation of NFRAME and VALUELEN. 2026-08-24 NIIBE Yutaka cipher:rsa:pkcs1: Reject shorter PS on decryption. + commit 9fd5ecd9abe3606e96fb85981ad386f6ea8d0d0a * cipher/rsa-common.c (_gcry_rsa_pkcs1_decode_for_enc): Validate the length of PS. 2026-08-18 Werner Koch tests: Add 3072 and 4096 bit powm benchmarks. + commit 7199d14b0211f23b69012a7412160ee2a1fcb44f * tests/benchmark.c (mpi_bench): Add data from two RSA public keys with their OpenPGP signatures. 2026-08-18 NIIBE Yutaka cipher:kem:dhkem: Validate OPTIONAL and OPTIONAL_LEN. + commit 8722f83fbf1b3b7f63a72a675c8f49f7e405e0c0 * cipher/kem.c (_gcry_kem_decap): Check OPTIONAL and OPTIONAL_LEN for GCRY_KEM_DHKEM25519 and GCRY_KEM_DHKEM448. cipher:ecc:sm2: Use constant time memequal to check. + commit f9de3feb0533cc456474fbeeab86c57f980c75ef * cipher/ecc-sm2.c (_gcry_ecc_sm2_decrypt): Use wipememory and ct_not_memequal. cipher:rsa: Only accept canonical signature. + commit 710d2a438bbfca083b8a680f8c8badc20b8f377f * cipher/rsa.c (rsa_verify): Reject if it's <= 0. Reject if it's larger than or equal to N. mpi:ec:Edward: Make sure to have fixed length MPI for get_affine. + commit 7004c17e28c3d6e5616c303e8b9fee298c4b8e25 * mpi/ec.c (_gcry_mpi_ec_get_affine): When copying X and Y, make sure to have fixed length. cipher:ecc: Only accept canonical value of S. + commit 73967d0ef06fc68a6796a5f646684e56119dad6c * cipher/ecc-eddsa.c (_gcry_ecc_eddsa_verify): Reject non-canonical S. 2026-08-18 Werner Koch tests: Add 3072 and 4096 bit powm benchmarks. + commit e4bd9cd9ec3e7f4ea2ef7676a2d98542ecac9d32 * tests/benchmark.c (mpi_bench): Add data from two RSA public keys with their OpenPGP signatures. 2026-08-12 NIIBE Yutaka cipher:kem:dhkem: Validate OPTIONAL and OPTIONAL_LEN. + commit 0de5c33470d249f511a412d76d15b3a525105371 * cipher/kem.c (_gcry_kem_decap): Check OPTIONAL and OPTIONAL_LEN for GCRY_KEM_DHKEM25519 and GCRY_KEM_DHKEM448. cipher:ecc:sm2: Use constant time memequal to check. + commit 8643186e0f63470af44c3a7523aa8fed480dee41 * cipher/ecc-sm2.c (_gcry_ecc_sm2_decrypt): Use wipememory and ct_not_memequal. cipher:rsa: Only accept canonical signature. + commit 742f8c149161adeab4b96459170fde363e6ae299 * cipher/rsa.c (rsa_verify): Reject if it's <= 0. Reject if it's larger than or e [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] --- ...01-libgcrypt-fix-m4-file-for-oe-core.patch | 2 +- ...s-Fix-link-errors-for-t-thread-local.patch | 13 ++--- ...m-fix-undefined-reference-to-pthread.patch | 11 ++-- .../libgcrypt/files/no-bench-slope.patch | 2 +- .../libgcrypt/files/no-native-gpg-error.patch | 4 +- ...ibgcrypt_1.12.2.bb => libgcrypt_1.12.3.bb} | 54 ++++++++++++++++++- 6 files changed, 65 insertions(+), 21 deletions(-) rename meta/recipes-support/libgcrypt/{libgcrypt_1.12.2.bb => libgcrypt_1.12.3.bb} (44%) diff --git a/meta/recipes-support/libgcrypt/files/0001-libgcrypt-fix-m4-file-for-oe-core.patch b/meta/recipes-support/libgcrypt/files/0001-libgcrypt-fix-m4-file-for-oe-core.patch index e60507e636..ad071e07f5 100644 --- a/meta/recipes-support/libgcrypt/files/0001-libgcrypt-fix-m4-file-for-oe-core.patch +++ b/meta/recipes-support/libgcrypt/files/0001-libgcrypt-fix-m4-file-for-oe-core.patch @@ -1,4 +1,4 @@ -From 3bc536529c9bbe1e62d1c1127abee6183ed64298 Mon Sep 17 00:00:00 2001 +From 4f27b68f509c94739d8d7c5e5c8bc1b0b17259ad Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Tue, 29 Oct 2019 14:08:32 -0400 Subject: [PATCH] libgcrypt: fix m4 file for oe-core diff --git a/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch b/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch index 19a925c2c6..6200ac0a31 100644 --- a/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch +++ b/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch @@ -1,4 +1,4 @@ -From 942e232ded48fa08d2bda417ae8ad8c03d644372 Mon Sep 17 00:00:00 2001 +From 4a8d31b6e1af1d2764e159d5825ad2241a74fe7b Mon Sep 17 00:00:00 2001 From: Collin Funk Date: Wed, 27 Aug 2025 11:49:06 +0800 Subject: [PATCH] tests: Fix link errors for t-thread-local. @@ -21,18 +21,15 @@ Signed-off-by: Hongxu Jia 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/Makefile.am b/tests/Makefile.am -index 4800135..f0f7adb 100644 +index 3baaf48..cc2fd6b 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am -@@ -102,7 +102,7 @@ testapi_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ +@@ -103,7 +103,7 @@ testapi_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ t_lock_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ t_lock_CFLAGS = $(GPG_ERROR_MT_CFLAGS) -lpthread t_thread_local_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ -t_thread_local_CFLAGS = $(GPG_ERROR_MT_CFLAGS) +t_thread_local_CFLAGS = $(GPG_ERROR_MT_CFLAGS) -lpthread testdrv_LDADD = $(LDADD_FOR_TESTS_KLUDGE) - - # Build a version of the test driver for the build platform. --- -2.34.1 - + t_cipher_internal_CPPFLAGS = $(AM_CPPFLAGS) -I$(top_srcdir)/cipher + t_sntrup761_CPPFLAGS = $(AM_CPPFLAGS) -I$(top_srcdir)/cipher diff --git a/meta/recipes-support/libgcrypt/files/0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch b/meta/recipes-support/libgcrypt/files/0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch index 090948c3c5..924ece8b8e 100644 --- a/meta/recipes-support/libgcrypt/files/0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch +++ b/meta/recipes-support/libgcrypt/files/0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch @@ -1,4 +1,4 @@ -From a3496435dcc223a914eec5e61e853934fd4eb635 Mon Sep 17 00:00:00 2001 +From 6322f759b58ba78d5b01c09c19d91571e999334c Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Wed, 27 Aug 2025 11:46:17 +0800 Subject: [PATCH] tests/Makefile.am: fix undefined reference to @@ -14,10 +14,10 @@ Signed-off-by: Hongxu Jia 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/Makefile.am b/tests/Makefile.am -index 93daf3c..4800135 100644 +index 8c468b4..3baaf48 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am -@@ -100,7 +100,7 @@ t_mpi_bit_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ +@@ -101,7 +101,7 @@ t_mpi_bit_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ t_secmem_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ testapi_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ t_lock_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ @@ -26,7 +26,7 @@ index 93daf3c..4800135 100644 t_thread_local_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ t_thread_local_CFLAGS = $(GPG_ERROR_MT_CFLAGS) testdrv_LDADD = $(LDADD_FOR_TESTS_KLUDGE) -@@ -122,7 +122,7 @@ else +@@ -125,7 +125,7 @@ else xtestsuite_libs = ../src/.libs/libgcrypt.so* xtestsuite_driver = testdrv t_kdf_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ @@ -35,6 +35,3 @@ index 93daf3c..4800135 100644 endif # xcheck uses our new testdrv instead of the automake test runner. --- -2.34.1 - diff --git a/meta/recipes-support/libgcrypt/files/no-bench-slope.patch b/meta/recipes-support/libgcrypt/files/no-bench-slope.patch index 606cca1344..849f8b0361 100644 --- a/meta/recipes-support/libgcrypt/files/no-bench-slope.patch +++ b/meta/recipes-support/libgcrypt/files/no-bench-slope.patch @@ -1,4 +1,4 @@ -From 254821a620c1f7d6542c23dbe555e7c02637a3f8 Mon Sep 17 00:00:00 2001 +From 50bfe58f1ffa6a8519377f4c10e5d41133d8782a Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Fri, 9 Sep 2022 11:13:37 +0100 Subject: [PATCH] libgcrypt: disable bench-slope test case diff --git a/meta/recipes-support/libgcrypt/files/no-native-gpg-error.patch b/meta/recipes-support/libgcrypt/files/no-native-gpg-error.patch index 98874ce12a..f22f6993a2 100644 --- a/meta/recipes-support/libgcrypt/files/no-native-gpg-error.patch +++ b/meta/recipes-support/libgcrypt/files/no-native-gpg-error.patch @@ -1,4 +1,4 @@ -From ede03b847038afc294e206ca345d12d75bbba844 Mon Sep 17 00:00:00 2001 +From a7778057e08273041c48e10ff2f4c7dcce9220c1 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Fri, 26 Aug 2022 15:23:37 +0100 Subject: [PATCH] libgcrypt: rewrite ptest @@ -13,7 +13,7 @@ Signed-off-by: Ross Burton 1 file changed, 1 deletion(-) diff --git a/tests/testdrv.c b/tests/testdrv.c -index bfca4c2..634b718 100644 +index 7743258..bffa3cc 100644 --- a/tests/testdrv.c +++ b/tests/testdrv.c @@ -32,7 +32,6 @@ diff --git a/meta/recipes-support/libgcrypt/libgcrypt_1.12.2.bb b/meta/recipes-support/libgcrypt/libgcrypt_1.12.3.bb similarity index 44% rename from meta/recipes-support/libgcrypt/libgcrypt_1.12.2.bb rename to meta/recipes-support/libgcrypt/libgcrypt_1.12.3.bb index deb053031e..af5f00dbfa 100644 --- a/meta/recipes-support/libgcrypt/libgcrypt_1.12.2.bb +++ b/meta/recipes-support/libgcrypt/libgcrypt_1.12.3.bb @@ -1,3 +1,53 @@ +# FIXME: the LIC_FILES_CHKSUM values have been updated by 'devtool upgrade'. +# The following is the difference between the old and the new license text. +# Please update the LICENSE value if needed, and summarize the changes in +# the commit message via 'License-Update:' tag. +# (example: 'License-Update: copyright years updated.') +# +# The changes: +# +# --- LICENSES +# +++ LICENSES +# @@ -61,6 +61,36 @@ +# +# #+begin_quote +# Copyright (c) 2021-2022, Intel Corporation +# + +# + Redistribution and use in source and binary forms, with or without +# + modification, are permitted provided that the following conditions are met: +# + +# + * Redistributions of source code must retain the above copyright notice, +# + this list of conditions and the following disclaimer. +# + * Redistributions in binary form must reproduce the above copyright +# + notice, this list of conditions and the following disclaimer in the +# + documentation and/or other materials provided with the distribution. +# + * Neither the name of Intel Corporation nor the names of its contributors +# + may be used to endorse or promote products derived from this software +# + without specific prior written permission. +# + +# + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +# + AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +# + DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE +# + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +# + SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER +# + CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, +# + OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +# + OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +# +#+end_quote +# + +# + For files: +# + - cipher/sm3-intel-avx2-amd64.S +# + +# +#+begin_quote +# + Copyright (c) 2023-2024, Intel Corporation +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are met: +# +# + SUMMARY = "General purpose cryptographic library based on the code from GnuPG" DESCRIPTION = "A cryptography library developed as a separated module of GnuPG. \ It can also be used independently of GnuPG, but depends on its error-reporting \ @@ -12,7 +62,7 @@ LICENSE:${PN}-dev = "GPL-2.0-or-later AND LGPL-2.1-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=570a9b3749dd0463a1778803b12a6dce \ file://COPYING.LIB;md5=4bf661c1e3793e55c8d1051bc5e0ae21 \ - file://LICENSES;md5=034b4e369944ad4b52a68368f1cf98b8 \ + file://LICENSES;md5=47e346a71a2593d19f741408407fe91f \ " DEPENDS = "libgpg-error" @@ -26,7 +76,7 @@ SRC_URI = "${GNUPG_MIRROR}/libgcrypt/libgcrypt-${PV}.tar.bz2 \ file://no-bench-slope.patch \ file://run-ptest \ " -SRC_URI[sha256sum] = "7ce33c2492221a0436f96a8500215e9f3e3dcb5fd26a757cd415e7a843babd5e" +SRC_URI[sha256sum] = "98d1b0b3202d2b03fa754a35aa3cbbfcf526a3260d8d2ee213748001b1043006" BINCONFIG = "${bindir}/libgcrypt-config"