kumquat-buildroot/package/gnupg2/gnupg2.hash

# From https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html
sha1  9255a70a984bfbfa5312a9a52a1cf47cb0d1fc84  gnupg-2.3.7.tar.bz2
# Calculated based on the hash above and signature
# https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.3.7.tar.bz2.sig
# using key 02F38DFF731FF97CB039A1DA549E695E905BA208
sha256  ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669  gnupg-2.3.7.tar.bz2
sha256  bc2d6664f6276fa0a72d57633b3ae68dc7dcb677b71018bf08c8e93e509f1357  COPYING
package/gnupg2: security bump to version 2.3.7 Fix CVE-2022-34903: GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line. https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-07-16 16:33:11 +02:00			`# From https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html`
			`sha1 9255a70a984bfbfa5312a9a52a1cf47cb0d1fc84 gnupg-2.3.7.tar.bz2`
gnupg2: bump to version 2.2.0 Switch to https download for firewall compatibility and security. As upstream now defaults to 'gpg' for the main binary name, keep the 'gpg2' name as in previous releases, to avoid conflict with the gnupg package. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-09-01 10:34:34 +02:00			`# Calculated based on the hash above and signature`
package/gnupg2: security bump to version 2.3.7 Fix CVE-2022-34903: GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line. https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-07-16 16:33:11 +02:00			`# https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.3.7.tar.bz2.sig`
			`# using key 02F38DFF731FF97CB039A1DA549E695E905BA208`
			`sha256 ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669 gnupg-2.3.7.tar.bz2`
package/gnupg2: bump vesion to 2.2.21 Reformatted hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-07-19 08:09:39 +02:00			`sha256 bc2d6664f6276fa0a72d57633b3ae68dc7dcb677b71018bf08c8e93e509f1357 COPYING`