Bernd Kuhls
bcb6d0057f
package/gnupg2: bump version to 2.2.19
...
Release notes:
- 2.2.18
https://lists.gnupg.org/pipermail/gnupg-announce/2019q4/000442.html
- 2.2.19
https://lists.gnupg.org/pipermail/gnupg-announce/2019q4/000443.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-05 21:29:22 +01:00
Baruch Siach
410e8a5977
package/gnupg2: security bump to version 2.2.17
...
This release mitigates the effects of the denial-of-service attacks on
the keyserver network (CVE-2019-13050).
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
https://access.redhat.com/articles/4264021
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-07-14 11:56:58 +02:00
Baruch Siach
32ef40a9d9
package/gnupg2: bump to version 2.2.13
...
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-03-12 21:51:53 +01:00
Baruch Siach
d4dbcb036a
gnupg2: security bump to version 2.2.12
...
Fixes CVE-2018-1000858: Cross Site Request Forgery with arbitrary HTTPS
GET requests via HTTP redirect.
https://sektioneins.de/en/advisories/advisory-012018-gnupg-wkd.html
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-01-15 21:33:17 +01:00
Baruch Siach
bf8e55fd08
gnupg2: bump to version 2.2.10
...
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-11-01 13:56:44 +01:00
Baruch Siach
b78a365b56
gnupg2: security bump to version 2.2.8
...
Fixes CVE-2018-12020: Unsanitized file names might cause injection of
terminal control characters into the status output of gnupg.
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-06-11 21:36:33 +02:00
Baruch Siach
429c6f21b3
gnupg2: bump to version 2.2.7
...
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-05-04 09:15:32 +02:00
Baruch Siach
3db93884a4
gnupg2: security bump to version 2.2.6
...
Fixes CVE-2018-9234: Unenforced configuration allows for apparently
valid certifications actually signed by signing subkeys.
Remove --disable-doc from configure options. We pass this options to all
autotools packages.
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-04-25 22:47:46 +02:00
Baruch Siach
379c347390
gnupg2: bump to version 2.2.5
...
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-02-28 20:44:53 +01:00
Baruch Siach
97ec1ddd5a
gnupg2: bump to version 2.2.4
...
Add license hash.
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-12 19:53:56 +01:00
Baruch Siach
02a07dde42
gnupg2: bump to version 2.2.3
...
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-12-14 06:33:11 +01:00
Baruch Siach
3587d29eae
gnupg2: bump to version 2.2.2
...
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-11-27 21:56:49 +01:00
Baruch Siach
e82fadab23
gnupg2: bump to version 2.2.0
...
Switch to https download for firewall compatibility and security.
As upstream now defaults to 'gpg' for the main binary name, keep the
'gpg2' name as in previous releases, to avoid conflict with the gnupg
package.
Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-09-03 14:21:43 +02:00
Vicente Olivert Riera
3f265b3eb4
gnupg2: bump version to 2.1.21
...
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-05-17 21:55:53 +02:00
Vicente Olivert Riera
32e8a130bf
gnupg2: bump version to 2.1.20
...
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-04-04 13:01:39 +02:00
Bernd Kuhls
284e71a0ad
package/gnupg2: bump version to 2.1.19
...
Support for GnuPG 2.0 will end 2017-12-31:
https://lists.gnupg.org/pipermail/gnupg-announce/2017q1/000402.html
Removed all patches:
- 0001-fix-pth-config-usage.patch
Not needed anymore, gnupg2 now depends on libnpth:
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=001352077cdc7e402421c77328bea1a052005673
- 0002-missing-include.patch
Not needed anymore after upstream commit
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=0367a4b8cfbf1f197e093ca2b83b27e0a409c3c7
- 0003-dont-run-tests.patch
Not needed anymore after upstream commit
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=4a232d23a8f51bebf9ee382e480248b4bde30f28
- 0004-silence-git-when-not-in-git-tree.patch
Not needed anymore after upstream commit restricting the usage of git
commands to the case where the directory .git exists
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=b67e4e523e6d19d384e23c5bb03010caebd150e7
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-19 21:46:29 +01:00
Gustavo Zacarias
0ab0d80c7c
gnupg2: bump to version 2.0.30
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-03-31 21:02:35 +02:00
Vicente Olivert Riera
a33f1917dc
gnupg2: bump version to 2.0.29
...
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-09-11 19:49:14 +02:00
Gustavo Zacarias
90687cc72a
gnupg2: bump to version 2.0.28
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-06-04 15:34:01 +02:00
Baruch Siach
b17e5352ca
gnupg2: security bump to version 2.0.27
...
Fixes:
CVE-2015-1606: Use after free, resulting from failure to skip invalid packets
CVE-2015-1607: memcpy with overlapping ranges, resulting from incorrect
bitwise left shifts
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-02-27 13:56:49 +01:00
Gustavo Zacarias
57963519da
gnupg2: add hash file
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-07 12:30:34 +02:00