aboutsummaryrefslogtreecommitdiff
path: root/security/libgcrypt
Commit message (Collapse)AuthorAgeFilesLines
* security/libgcrypt: Circumvent WITH_DEBUG build failureCy Schubert2022-12-052-0/+33
| | | | | | | | | | Register allocation exaustion results within inline assembly when WITH_DEBUG is specified. Therefore when WITH_DEBUG is used, disable inline assembly. PR: 268173 Reported by: bofh MFH: 2022Q4
* Remove WWW entries moved into port MakefilesStefan Eßer2022-09-071-2/+0
| | | | | | | | | | Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)
* Add WWW entries to port MakefilesStefan Eßer2022-09-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)
* security/libgcrypt: enable asm on powerpcPiotr Kubaj2022-04-271-4/+1
|
* security/libgcrypt: optionalize INFOGreg V2022-01-272-5/+28
| | | | | | | | | | Allow the user to optionally exclude INFO files, allowing the space conscious user the ability to install a minimual package. The default remains to install INOF files as before. PR: 259552 Reported by: Greg V <greg@unrelenting.technology> Submitted by: Greg V <greg@unrelenting.technology>
* security/libgcrypt: Update to 1.9.4Cy Schubert2021-08-234-10/+10
|
* security/libgcrypt: Make static an optionCy Schubert2021-05-232-3/+7
| | | | | | | | | | | | | | | | | Static linked binaries, due to the fact that they're statically linked, can pose a security risk should a library be updated and depending software not be recompiled and linked. This was a hot topic on BUGTRAQ about 25 years ago. The default is to build static libraries so as not to alter the package avoiding a POLA violation. PR: 255735 Submitted by: Daniel Engberg <daniel.engberg.lists@pyret.net> (mostly) Reported by: Daniel Engberg <daniel.engberg.lists@pyret.net> Reviewed by: cy Tested by: cy MFH: 2021Q2
* security/libgcrypt: update to 1.9.3Cy Schubert2021-05-233-6/+5
| | | | | | | | PR: 255735 Submitted by: Daniel Engberg <daniel.engberg.lists@pyret.net> Reviewed by: cy Tested by: cy MFH: 2021Q2
* One more small cleanup, forgotten yesterday.Mathieu Arnold2021-04-071-1/+0
| | | | Reported by: lwhsu
* Remove # $FreeBSD$ from Makefiles.Mathieu Arnold2021-04-061-1/+0
|
* security/libgcrypt: Fix armv7 buildCy Schubert2021-03-271-1/+1
| | | | | | | | | | | Similar to armv6, armv7 fails to build jitterentropy-base.c without optimization, falling flat on the #pragma GCC optimize statement. Like armv6, avoid building jitterentropy-base.c altogether. PR: 253698 Notes: svn path=/head/; revision=569290
* security/libgcrypt: Fix armv6 buildCy Schubert2021-03-171-0/+5
| | | | | | | | | | | | | | Armv6 fails to build jitterentropy-base.c without optimization, even though #pragma GCC optimization and #pragma clang optimization are specified. For now brute force disable building the jitter entropy generator on armv6. PR: 253698 Submitted by: yani _ pi-greece.eu Reported by: yani _ pi-greece.eu Notes: svn path=/head/; revision=568668
* security/libgcrypt: Fix FreeBSD 12 armv6 build.Cy Schubert2021-03-171-0/+10
| | | | | | | MFH: 2021Q1 Notes: svn path=/head/; revision=568667
* security/libgcrypt: update 1.9.1 --> 1.9.2Cy Schubert2021-02-183-5/+5
| | | | Notes: svn path=/head/; revision=565939
* security/libgcrypt: Update 1.8.7 --> 1.9.1Cy Schubert2021-02-034-36/+5
| | | | | | | Note: 1.8.7 nor 1.9.1 are vulnerable to CVE-2021-3345. Only 1.9.0 is. Notes: svn path=/head/; revision=563969
* Update 1.8.6 --> 1.8.7Cy Schubert2020-10-243-5/+5
| | | | Notes: svn path=/head/; revision=553197
* Assume maintainership.Cy Schubert2020-10-051-1/+1
| | | | Notes: svn path=/head/; revision=551532
* Update 1.8.5 --> 1.8.6Cy Schubert2020-10-053-5/+5
| | | | Notes: svn path=/head/; revision=551531
* Return cpm@'s ports to the pool after safekeeping his commit bit.Rene Ladan2020-10-051-1/+1
| | | | | | | With hat: portmgr-secretary Notes: svn path=/head/; revision=551529
* security/libgcrypt: fix build on aarch64 with lld10Mikael Urankar2020-03-311-0/+31
| | | | | | | | | | | | import upstream fix: https://github.com/gpg/libgcrypt/commit/09c27280cc09798d15369b3a143036b7ab5ddd69 PR: 244848 Submitted by: Charlie Li Approved by: cpm (maintainer timeout), manu (mentor, implicit) Notes: svn path=/head/; revision=529954
* security/libgcrypt: Update to 1.8.5Carlos J. Puga Medina2019-09-023-6/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Pet portlint Noteworthy changes in version 1.8.5 =================================== * Bug fixes: - Add mitigation against an ECDSA timing attack. [T4626,CVE-2019-13627] - Improve ECDSA unblinding. * Other features: - Provide a pkg-config file for libgcrypt. Release-info: https://dev.gnupg.org/T4683 For further details, see https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html MFH: 2019Q3 Security: http://vuxml.freebsd.org/freebsd/c9c6c2f8-cd54-11e9-af89-080027ef1a23.html Notes: svn path=/head/; revision=510770
* Install texinfo files (GNU info) into ${PREFIX}/share/infoBaptiste Daroussin2018-11-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | After a discussion on the mailing list on moving manpages to ${PREFIX}/share/man for consistency with base where it is installed in usr/share/man, it appeared the same should happen to GNU info files which were installed under share in base and not in ports. Now texinfo is not in base on any of the supported version of FreeBSD it is possible to proceed to this move and it is easier to do than the manpage change. Other benefit than consistency are less patching: all build tools but cmake are expecting info files to be under share/info and cmake (patched here) was having an exception for BSD so the patch makes FreeBSD case less specific for them Bump revision of all impacted ports PR: 232907 exp-run by: antoine Differential Revision: https://reviews.freebsd.org/D17816 Notes: svn path=/head/; revision=484628
* security/libgcrypt: Update to 1.8.4Carlos J. Puga Medina2018-10-283-7/+7
| | | | | | | | | - Update libgpg-error version required to 1.32 Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2018q4/000431.html Notes: svn path=/head/; revision=483355
* security/libgcrypt: Update to 1.8.3 (bugfix)Carlos J. Puga Medina2018-06-134-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Improve comment in Makefile - Provide more elaborate port description and update WWW in pkg-descr Noteworthy changes in version 1.8.3 =================================== - Use blinding for ECDSA signing to mitigate a novel side-channel attack. [#4011,CVE-2018-0495] - Fix incorrect counter overflow handling for GCM when using an IV size other than 96 bit. [#3764] - Fix incorrect output of AES-keywrap mode for in-place encryption on some platforms. - Fix the gcry_mpi_ec_curve_point point validation function. - Fix rare assertion failure in gcry_prime_check. Release info at <https://dev.gnupg.org/T4016>. For further details, see https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html MFH: 2018Q2 Security: http://vuxml.freebsd.org/freebsd/9b5162de-6f39-11e8-818e-e8e0b747a45a.html Notes: svn path=/head/; revision=472337
* security/libgcrypt: Fix build for powerpc/powerpcspeCarlos J. Puga Medina2018-01-221-0/+13
| | | | | | | | | | | - Add the missing check for powerpcspe- and powerpc- in mpi/config.links Submitted by: jhibbits Approved by: cpm (maintainer) Differential Revision: https://reviews.freebsd.org/D13854 Notes: svn path=/head/; revision=459647
* security/libgcrypt: update to 1.8.2Carlos J. Puga Medina2017-12-153-5/+5
| | | | | | | | | | | | | - Update libgcrypt to 1.8.2 - Bump library version in pkg-plist Changelog: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.2/log.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.1/1.8.2/29a74/abi_compat_report.html MFH: 2017Q4 Notes: svn path=/head/; revision=456419
* security/libgcrypt: update to 1.8.1Carlos J. Puga Medina2017-08-303-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update libgcrypt to 1.8.1 - Bump library version in pkg-plist Noteworthy changes in version 1.8.1 * Bug fixes: - Mitigate a local side-channel attack on Curve25519 dubbed "May the Fourth be With You". [CVE-2017-0379] [also in 1.7.9] - Add more extra bytes to the pool after reading a seed file. - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384. - Fix build problems with the Jitter RNG - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE). Changes: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.1/log.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.0/1.8.1/31172/abi_compat_report.html MFH: 2017Q3 Security: https://vuxml.freebsd.org/freebsd/22f28bb3-8d98-11e7-8c37-e8e0b747a45a.html Notes: svn path=/head/; revision=448989
* - Fix the command line munging for jitterbaseCarlos J. Puga Medina2017-08-011-0/+1
| | | | | | | | | | PR: 220937 Reported by: O. Hartmann <ohartmann@walstatt.org> Obtained from: https://dev.gnupg.org/rCac39522ab08fcd2483edc223334c6ab9d19e91f3 MFH: 2017Q3 (blanket) Notes: svn path=/head/; revision=447018
* Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set.Jung-uk Kim2017-07-281-1/+1
| | | | | | | | | PR: 221027 Reviewed by: mat Approved by: portmgr (antoine) Notes: svn path=/head/; revision=446854
* - Remove unnecessary extra-patch-aarch64 (applied upstream)Carlos J. Puga Medina2017-07-222-72/+0
| | | | | | | | Reported by: Shawn Webb <shawn.webb@hardenedbsd.org> via email MFH: 2017Q3 (blanket) Notes: svn path=/head/; revision=446350
* security/libgcrypt: update to 1.8.0Carlos J. Puga Medina2017-07-213-7/+7
| | | | | | | | | | | | | | | | - Update libgcrypt to 1.8.0 - Update libgpg-error version required to 1.25 - Bump library version in pkg-plist Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000410.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.8/1.8.0/d9ddd/abi_compat_report.html PR: 220858 MFH: 2017Q3 Exp-run by: antoine Notes: svn path=/head/; revision=446306
* security/libgcrypt: update to 1.7.8Carlos J. Puga Medina2017-07-043-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | - Update libgcrypt to 1.7.8 - Bump library version in pkg-plist Noteworthy changes in version 1.7.8 * Bug fixes: - Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html PR: 220382 MFH: 2017Q3 Exp-run by: antoine Security: https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html Notes: svn path=/head/; revision=445028
* security/libgcrypt: update to 1.7.7Carlos J. Puga Medina2017-06-075-14/+14
| | | | | | | | | | | | | | | | | | | | | | - Update libgcrypt to 1.7.7 - Silence all explicitly called commands - Update WWW in pkg-descr: use https:// - Bump library version in pkg-plist Noteworthy changes in version 1.7.7 * Bug fixes: - Fix possible timing attack on EdDSA session key. - Fix long standing bug in secure memory implementation which could lead to a segv on free. [bug#3027]. PR: 219747 MFH: 2017Q2 Exp-run by: antoine Notes: svn path=/head/; revision=442829
* - Patch only applies to aarch64. Remove armv6 check.Carlos J. Puga Medina2017-03-091-1/+1
| | | | | | | | Reported by: jbeich MFH: 2017Q1 (blanket) Notes: svn path=/head/; revision=435736
* security/libgcrypt: fix build on aarch64Carlos J. Puga Medina2017-02-282-0/+72
| | | | | | | | | | | | | | | libtool: compile: cc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src -Wa,--noexecstack -O2 -pipe -fno-strict-aliasing -std=gnu89 -MT cipher-gcm-armv8-aarch64-ce.lo -MD -MP -MF .deps/cipher-gcm-armv8-aarch64-ce.Tpo -c cipher-gcm-armv8-aarch64-ce.S -fPIC -DPIC -o .libs/cipher-gcm-armv8-aarch64-ce.o cipher-gcm-armv8-aarch64-ce.S:190:3: error: instruction requires: neon eor v31.16b, v31.16b, v31.16b ^ PR: 217271 Submitted by: krion Reported by: Simon Rozman <simon@rozman.si> MFH: 2017Q1 (blanket) Notes: svn path=/head/; revision=435049
* security/libgcrypt: update to 1.7.6Carlos J. Puga Medina2017-01-233-5/+5
| | | | | | | | | | | | | | | | | Noteworthy changes in version 1.7.6 * Bug fixes: - Fix AES CTR self-check detected failure in the SSSE3 based implementation. - Remove gratuitous select before the getrandom syscall. PR: 216305 MFH: 2017Q1 Exp-run by: antoine Notes: svn path=/head/; revision=432213
* security/libgcrypt: Update to 1.7.5Carlos J. Puga Medina2016-12-234-34/+7
| | | | | | | | | | | | | | | | | | - Update to 1.7.5 - Remove files useless to install from DOCS - Remove patch since sparc v8 is not supported on FreeBSD - Bump library version in pkg-plist Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q4/000399.html PR: 215236 Approved by: amdmi3 (mentor) MFH: 2016Q4 Exp-run by: antoine Notes: svn path=/head/; revision=429273
* ${RM} already has -f.Mathieu Arnold2016-10-211-1/+1
| | | | | | | | | | PR: 213570 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Notes: svn path=/head/; revision=424411
* - Update to 1.7.3 (security fixes)Carlos J. Puga Medina2016-08-183-5/+5
| | | | | | | | | | | | | | - Bump library version in pkg-plist ref: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html Reviewed by: amdmi3 (mentor) Approved by: amdmi3 (mentor) MFH: 2016Q3 Differential Revision: D7558 Notes: svn path=/head/; revision=420399
* - Update to 1.7.2Carlos J. Puga Medina2016-07-203-5/+5
| | | | | | | | | | | | | | | | | - Bump library version in pkg-plist Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000392.html PR: 211153 Reviewed by: junovitch (mentor) Approved by: junovitch (mentor) MFH: 2016Q3 Exp-run: antoine Differential Revision: D7221 Notes: svn path=/head/; revision=418828
* - Update to 1.7.1Carlos J. Puga Medina2016-06-175-290/+10
| | | | | | | | | | | | | | | | | - Remove unneeded patch (applied upstream) - Convert to new test framework https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000389.html PR: 210328 Reviewed by: amdmi3, junovitch (mentors) Approved by: amdmi3, junovitch (mentors) MFH: 2016Q2 Exp-run: antoine Differential Revision: D6865 Notes: svn path=/head/; revision=417040
* - Update to 1.7.0Carlos J. Puga Medina2016-04-237-100/+296
| | | | | | | | | | | | | | | | - Remove unneeded patches (applied upstream) - Fix inline assembler error on 9.x - Fix pkg-plist Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000386.html PR: 208907 Approved by: junovitch (mentor) Exp-run: antoine Differential Revision: D5989 Notes: svn path=/head/; revision=413860
* Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.Mathieu Arnold2016-04-011-2/+2
| | | | | | | | With hat: portmgr Sponsored by: Absolight Notes: svn path=/head/; revision=412349
* - cipher/salsa20.c (selftest): Ensure 16-byte alignment for salsa20Carlos J. Puga Medina2016-03-284-28/+90
| | | | | | | | | | | | context structure. - mpi/longlong.h: Fix build on sparc. PR: 206919 Approved by: junovitch (mentor) Notes: svn path=/head/; revision=412077
* - Update libgcrypt to 1.6.5Carlos J. Puga Medina2016-02-165-67/+28
| | | | | | | | | | | | | | - Change LICENSE since support has been added for "or later" variants of GNU licenses. - Remove needless patch-cipher_salsa20.c Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html PR: 207107 Approved by: junovitch (mentor) Notes: svn path=/head/; revision=408972
* This patch fixes alignment of self-test context in salsa20 requiredCarlos J. Puga Medina2016-02-085-65/+83
| | | | | | | | | | | | | | | for amd64 implementation. Other changes: - Regenerate patches to make portlint(1) happy - Update MAINTAINER to my @FreeBSD.org address - Bump PORTREVISION PR: 206919 Approved by: junovitch (mentor) Notes: svn path=/head/; revision=408514
* Add upstream commit to fix build errors with -pedantic.Raphael Kubo da Costa2015-12-182-1/+41
| | | | | | | | | | | | | | | | | This fixes at least devel/ccrtp's build on 9.3, which is currently broken: In file included from ccrtp/crypto/gcrypt/gcrypthmac.cpp:23: /usr/local/include/gcrypt.h:509: error: comma at end of enumerator list /usr/local/include/gcrypt.h:1346: error: comma at end of enumerator list Makefile:571: recipe for target 'gcrypthmac.lo' failed MFH'ing this is not necessary, this bug is only present in libgcrypt 1.6.4. PR: 205000 Approved by: maintainer timeout (15 days) Notes: svn path=/head/; revision=403961
* security/libgcrypt: Re-add missing patchKurt Jaeger2015-11-222-1/+24
| | | | | | | | | | | - This patch was removed when updating to 1.6.4, so the patch needs to be put back in order to solve the bug 204399. PR: 204600 Submitted by: Carlos J. Puga Medina <cpm@fbsd.es> (maintainer) Notes: svn path=/head/; revision=402237
* Enable the building and installation of the .a version of the librarySean Bruno2015-10-292-1/+3
| | | | | | | | | | for static linking. This affects emulators/qemu-user-static primarily but will help anyone trying to statically link their applications. Reviewed by: tijl cpm@fbsd.es (Maintainer) Notes: svn path=/head/; revision=400464
* - Update to 1.8.4Sunpoet Po-Chuan Hsieh2015-10-275-40/+5
| | | | | | | | | Changes: http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html PR: 204003 Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer) Notes: svn path=/head/; revision=400319