From 34df9debfb6cfdbb6bd011f7565f85fa0d9784ee Mon Sep 17 00:00:00 2001 From: Julien Olivain Date: Tue, 3 Jan 2023 20:36:46 +0100 Subject: [PATCH] package/libksba: security bump to version 1.6.3 Fixes: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629 See also: https://gnupg.org/blog/20221017-pepe-left-the-ksba.html For changelog see: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=log;h=libksba-1.6.3 Signed-off-by: Julien Olivain Signed-off-by: Peter Korsgaard (cherry picked from commit 456f18409861a0bee1d553d530cef8bf3482ee7a) Signed-off-by: Peter Korsgaard --- package/libksba/libksba.hash | 2 +- package/libksba/libksba.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libksba/libksba.hash b/package/libksba/libksba.hash index 77485c0cb6..5c6c5eda7a 100644 --- a/package/libksba/libksba.hash +++ b/package/libksba/libksba.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -sha256 fce01ccac59812bddadffacff017dac2e4762bdb6ebc6ffe06f6ed4f6192c971 libksba-1.6.2.tar.bz2 +sha256 3f72c68db30971ebbf14367527719423f0a4d5f8103fc9f4a1c01a9fa440de5c libksba-1.6.3.tar.bz2 # Hash for license files: sha256 8f1b87e551d97b2b23b6d3403a5d598c63ea89824cb8ee351f631f6cab2beaa5 AUTHORS diff --git a/package/libksba/libksba.mk b/package/libksba/libksba.mk index 727a836cf4..b7c0508df8 100644 --- a/package/libksba/libksba.mk +++ b/package/libksba/libksba.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBKSBA_VERSION = 1.6.2 +LIBKSBA_VERSION = 1.6.3 LIBKSBA_SOURCE = libksba-$(LIBKSBA_VERSION).tar.bz2 LIBKSBA_SITE = https://gnupg.org/ftp/gcrypt/libksba LIBKSBA_LICENSE = LGPL-3.0+ or GPL-2.0+ (library, headers), GPL-3.0+ (manual, tests, build system)