From bdcd5adf39186e8c67a2b55c05a67fd45bc04110 Mon Sep 17 00:00:00 2001 From: Julien Olivain Date: Wed, 7 Feb 2024 20:42:33 +0100 Subject: [PATCH] package/gnupg2: security bump to version 2.4.4 See release announce: https://lists.gnupg.org/pipermail/gnupg-announce/2024q1/000481.html For the details about the security advisory for GnuPG created smartcard keys, see: https://gnupg.org/blog/20240125-smartcard-backup-key.html This commit also drops the package patch, which is now included in this new version. Signed-off-by: Julien Olivain Signed-off-by: Thomas Petazzoni --- ...he-call-of-ks_ldap_help_variables-wh.patch | 36 ------------------- package/gnupg2/gnupg2.hash | 4 +-- package/gnupg2/gnupg2.mk | 2 +- 3 files changed, 3 insertions(+), 39 deletions(-) delete mode 100644 package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch diff --git a/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch b/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch deleted file mode 100644 index 53dd39cf47..0000000000 --- a/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch +++ /dev/null @@ -1,36 +0,0 @@ -From dc13361524c1477b2106c7385f2059f9ea111b84 Mon Sep 17 00:00:00 2001 -From: NIIBE Yutaka -Date: Wed, 5 Jul 2023 09:29:54 +0900 -Subject: [PATCH] dirmngr: Enable the call of ks_ldap_help_variables when - USE_LDAP. - -* dirmngr/server.c [USE_LDAP] (cmd_ad_query): Conditionalize. - --- - -Signed-off-by: NIIBE Yutaka - -Upstream: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=dc13361524c1477b2106c7385f2059f9ea111b84 - -Signed-off-by: Bernd Kuhls ---- - dirmngr/server.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/dirmngr/server.c b/dirmngr/server.c -index 51a149cb2..ee61f63d6 100644 ---- a/dirmngr/server.c -+++ b/dirmngr/server.c -@@ -2776,7 +2776,9 @@ cmd_ad_query (assuan_context_t ctx, char *line) - - if (opt_help) - { -+#if USE_LDAP - ks_ldap_help_variables (ctrl); -+#endif - err = 0; - goto leave; - } --- -2.11.0 - diff --git a/package/gnupg2/gnupg2.hash b/package/gnupg2/gnupg2.hash index 4b770fa520..c821afb55e 100644 --- a/package/gnupg2/gnupg2.hash +++ b/package/gnupg2/gnupg2.hash @@ -1,5 +1,5 @@ # From https://www.gnupg.org/download/integrity_check.html -sha1 79a60c8e415e3daaa33d0546398174252a56f7ac gnupg-2.4.3.tar.bz2 -sha256 a271ae6d732f6f4d80c258ad9ee88dd9c94c8fdc33c3e45328c4d7c126bd219d gnupg-2.4.3.tar.bz2 +sha1 228b3984325fdeebc5e3f2d165c6419a5ebc28de gnupg-2.4.4.tar.bz2 +sha256 67ebe016ca90fa7688ce67a387ebd82c6261e95897db7b23df24ff335be85bc6 gnupg-2.4.4.tar.bz2 # Locally calculated sha256 bc2d6664f6276fa0a72d57633b3ae68dc7dcb677b71018bf08c8e93e509f1357 COPYING diff --git a/package/gnupg2/gnupg2.mk b/package/gnupg2/gnupg2.mk index d21c1e242d..986da4790c 100644 --- a/package/gnupg2/gnupg2.mk +++ b/package/gnupg2/gnupg2.mk @@ -4,7 +4,7 @@ # ################################################################################ -GNUPG2_VERSION = 2.4.3 +GNUPG2_VERSION = 2.4.4 GNUPG2_SOURCE = gnupg-$(GNUPG2_VERSION).tar.bz2 GNUPG2_SITE = https://gnupg.org/ftp/gcrypt/gnupg GNUPG2_LICENSE = GPL-3.0+