kumquat-buildroot/package/gnupg2
Fabrice Fontaine 5a0a9227ba package/gnupg2: security bump to version 2.3.7
Fix CVE-2022-34903: GnuPG through 2.3.6, in unusual situations where an
attacker possesses any secret-key information from a victim's keyring
and other constraints (e.g., use of GPGME) are met, allows signature
forgery via injection into the status line.

https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:32:05 +02:00
..
Config.in
gnupg2.hash
gnupg2.mk