From: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed, 13 Aug 2025 20:53:01 +0000 (+0200)
Subject: libgcrypt: Update to version 1.11.2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=913da0023a8c9b5cb792ccaf3f9329e747f1c365;p=ipfire-2.x.git

libgcrypt: Update to version 1.11.2

- Update from version 1.11.0 to 1.11.2
- Update of the rootfile
- Changelog
    1.11.2
	Bug fixes:
	   - Fix link errors in regression test t-thread-local on some
	     platforms (e.g. NetBSD).  [T7634]
	   - Add missing file to allow building for RISC-V.  [T7647]
	   - Support secp256k1 by KEM API.  GnuPG has recently switched to use
	     the KEM interface and a few folks are using this curve.  [T7698]
	   - Fix a missing initialization in RSA's generate_fips.
	     [rG448693047f]
	Other:
	   - Silence GCC 15 warnings [rG7ebe90e555,T7617]
	   - Provide a prototype for __udiv_qrnnd for PowerPC and Alpha which
	     is required due to GCC-15 changes.  [T7721]
	   - Add missing abi versions and machine tags for PowerPC assembly
	     with GCC-15.  [T7721]
	   - Use '.rodata' section for read-only data of poly1305-p10le.
	     [T7721]
	Interface changes relative to the 1.11.1 release:
	   GCRY_KEM_RAW_P256R1                   NEW enum.
    1.11.1
	Bug fixes:
	   - Fix build regression on 32 bit Windows using Clang. [T7175]
	   - Fix build regression on macOS due to symbol naming.  [T7170]
	   - Fix Kyber secret-dependent branch introduced by recent versions
	     of Clang.  [rCf765778e82]
	   - Fix build regression due to the use of AVX512 in Blake.  [T7184]
	   - Do not build i386 asm on amd64 and vice versa.  [T7220]
	   - Fix build regression on armhf with gcc-14.  [T7226]
	   - Return the proper error code on malloc failure in hex2buffer.
	     [rCc51151f5b0]
	   - Fix long standing bug for PRIME % 2 == 0.  [rC639b0fca15]
	Performance:
	   - Add AES Vector Permute intrinsics implementation for AArch64.
	     [rC94a63aedbb]
	   - Add GHASH AArch64/SIMD intrinsics implementation.  [rCfec871fd18]
	   - Add RISC-V vector permute AES.  [rCb24ebd6163]
	   - Add GHASH RISC-V Zbb+Zbc implementation.  [rC0f1fec12b0]
	   - Add ChaCha20 RISC-V vector intrinsics implementation.
	     [rC8dbee93ac2]
	   - Add SHA3 acceleration for RISC-V Zbb extension.  [rC1a660068ba]
	Other:
	   - Add CET support for i386 and amd64 assembly.  [T7220]
	   - Add PAC/BTI support for AArch64 asm.  [T7220]
	   - Apply changes to Kyber from upstream for final FIPS 203.
	     [rCcc95c36e7f]
	   - Introduce an internal API for a revampled FIPS service indicator.
	     [T7340]
	   - Several improvements for constant time operation by the
	     introduction of Least Leak Intended (LLI) variants of internal
	     functions.  [T7519,T7490]
	   - Remove WindowsCE support.  [T7486]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index d00f191b7..3cdca7523 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
 #usr/lib/libgcrypt.la
 #usr/lib/libgcrypt.so
 usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.5.0
+usr/lib/libgcrypt.so.20.6.0
 #usr/lib/pkgconfig/libgcrypt.pc
 #usr/share/aclocal/libgcrypt.m4
 #usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 341683bfb..2e5fb7e8a 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.11.0
+VER        = 1.11.2
 
 THISAPP    = libgcrypt-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = fe3f42480c0b9a0c50c24f4c54197404b4e1056d8baa9c0c07c671c9c05b90777580b4cbcde931b50ecb4dd93f5ddad89cea99aa36a35f86f796a003e3816f7d
+$(DL_FILE)_BLAKE2 = 8ad2dd84e8ec2bddb5c008c6823a6d72b8f2d6237972966bc590be0d89bb6b50a5cbba1b42631d0950c4bea125a6d9a845fbf703b756a38088f66054712efa9c
 
 install : $(TARGET)
 
@@ -71,10 +71,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
 	$(UPDATE_AUTOMAKE)
-	cd $(DIR_APP) && \
-		./configure \
-			--prefix=/usr \
-			--enable-noexecstack
+	cd $(DIR_APP) && ./configure \
+				--prefix=/usr \
+				--enable-noexecstack
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)