[Bug 2036724] Re: [FFe] sync libgcrypt20 1.10.2-3 from Debian to mantic

[Tobias Heider]

I think it is fine to drop it if it makes your job easier.

When enabling FIPS or FIPS Updates on Ubuntu the pro client adds a
separate FIPS only archive that ships the certified package versions
(including a kernel enabling the proc flag). There is no supported FIPS
setup that ship the regular archive libgcrypt version so it shouldn't be
a problem for us.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libgcrypt20 in Ubuntu.
https://bugs.launchpad.net/bugs/2036724

Title:
  [FFe] sync libgcrypt20 1.10.2-3 from Debian to mantic

Status in libgcrypt20 package in Ubuntu:
  New

Bug description:
  To sync libgcrypt20 1.10.2-3 instead of merging, it will drop 2
  remaining changes:

  1. d/p/12_lessdeps_libgcrypt-config.diff: refresh patch offsets

     It's same as the debian package, and it can be applied successfully without
     this delta.

  2. d/p/disable_fips_enabled_read.patch
     Disable the library reading /proc/sys/crypto/fips_enabled file
     and going into FIPS mode.
     libgcrypt is not a FIPS certified library.

     I want to request FFe for this one. libgcrypt is FIPS certified library
     nowadays. So this patch is obsoleted.

  Changelog entries since current mantic version 1.10.2-2ubuntu1:

  libgcrypt20 (1.10.2-3) unstable; urgency=medium

   [ Simon Josefsson ]
   * Update Homepage: URL.

   [ Andreas Metzler ]
   * Drop --insert-timestamp linker option on mingw*, binutils 2.41 should use
     SOURCE_DATE_EPOCH automatically and the Debian package has dropped the
     patch to add the --insert-timestamp option. Closes: #1052219

   -- Andreas Metzler <ametzler at debian.org>  Tue, 19 Sep 2023 13:48:32
  +0200¬

  This new version fixes libgcrypt20 FTBFS.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libgcrypt20/+bug/2036724/+subscriptions