[tor-commits] [tor-messenger-build/updater] Update libgcrypt to 1.6.6 for CVE-2016-6316

[sukhbir at torproject.org]

commit a82a7c1bd2258e404569841a01ea450debfbb4cc
Author: Arlo Breault <arlolra at gmail.com>
Date:   Thu Aug 18 22:39:46 2016 -0700

    Update libgcrypt to 1.6.6 for CVE-2016-6316
    
     * See https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
    
     * Also, bump libgpg-error to 1.24
---
 ChangeLog                    | 2 ++
 projects/libgcrypt/config    | 2 +-
 projects/libgpg-error/config | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index dc7841f..a392187 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,6 +3,8 @@ Tor Messenger 0.1.0b7 --
    * Use the THUNDERBIRD_45_2_0_RELEASE tag on mozilla-esr45
    * Use the THUNDERBIRD_45_2_0_RELEASE tag on comm-esr45
    * Bug 19053: Display plaintext in notifications
+   * Update libgpg-error to 1.24
+   * Update libgcrypt to 1.6.6 for CVE-2016-6316
    * ctypes-otr
      * GH 66: Provide functionality for adding verified fingerprints (patch by Vu Quoc Huy)
      * GH 73: Show progress during verification in notification box (patch by Vu Quoc Huy)
diff --git a/projects/libgcrypt/config b/projects/libgcrypt/config
index 307643f..2b43818 100644
--- a/projects/libgcrypt/config
+++ b/projects/libgcrypt/config
@@ -1,6 +1,6 @@
 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
-version: 1.6.4
+version: 1.6.6
 remote_docker: 1
 var:
   deps:
diff --git a/projects/libgpg-error/config b/projects/libgpg-error/config
index 48c10be..ed98a5e 100644
--- a/projects/libgpg-error/config
+++ b/projects/libgpg-error/config
@@ -1,6 +1,6 @@
 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
-version: 1.20
+version: 1.24
 remote_docker: 1
 var:
   deps: