Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/807611/?format=api
{ "id": 807611, "url": "http://patchwork.ozlabs.org/api/patches/807611/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/10033e7b173d98374eac45d28e1fb97f68e82118.1504094464.git.baruch@tkos.co.il/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<10033e7b173d98374eac45d28e1fb97f68e82118.1504094464.git.baruch@tkos.co.il>", "list_archive_url": null, "date": "2017-08-30T12:01:04", "name": "gnupg: security bump to version 1.4.22", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "4ddf20fa2ae28ce789849ab4a2b09188bdfd8876", "submitter": { "id": 1458, "url": "http://patchwork.ozlabs.org/api/people/1458/?format=api", "name": "Baruch Siach", "email": "baruch@tkos.co.il" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/10033e7b173d98374eac45d28e1fb97f68e82118.1504094464.git.baruch@tkos.co.il/mbox/", "series": [ { "id": 603, "url": "http://patchwork.ozlabs.org/api/series/603/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=603", "date": "2017-08-30T12:01:04", "name": "gnupg: security bump to version 1.4.22", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/603/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/807611/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/807611/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@busybox.net>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "buildroot@lists.busybox.net" ], "Delivered-To": [ "patchwork-incoming@bilbo.ozlabs.org", "buildroot@osuosl.org" ], "Authentication-Results": "ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.138; helo=whitealder.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=<UNKNOWN>)", "Received": [ "from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xj3y30R52z9sQl\n\tfor <incoming@patchwork.ozlabs.org>;\n\tWed, 30 Aug 2017 22:01:29 +1000 (AEST)", "from localhost (localhost [127.0.0.1])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id 58255886FB;\n\tWed, 30 Aug 2017 12:01:23 +0000 (UTC)", "from whitealder.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id FN-idIiQm2IA; Wed, 30 Aug 2017 12:01:21 +0000 (UTC)", "from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id 3580088635;\n\tWed, 30 Aug 2017 12:01:21 +0000 (UTC)", "from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\tby ash.osuosl.org (Postfix) with ESMTP id 4C8561BFBAD\n\tfor <buildroot@lists.busybox.net>;\n\tWed, 30 Aug 2017 12:01:19 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id 4825088635\n\tfor <buildroot@lists.busybox.net>;\n\tWed, 30 Aug 2017 12:01:19 +0000 (UTC)", "from whitealder.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id FEyUxPwKVBe8 for <buildroot@lists.busybox.net>;\n\tWed, 30 Aug 2017 12:01:17 +0000 (UTC)", "from mx.tkos.co.il (guitar.tcltek.co.il [192.115.133.116])\n\tby whitealder.osuosl.org (Postfix) with ESMTPS id 3722B88617\n\tfor <buildroot@busybox.net>; Wed, 30 Aug 2017 12:01:16 +0000 (UTC)", "from tarshish.tkos.co.il (unknown [10.0.8.6])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128\n\tbits)) (No client certificate requested)\n\tby mx.tkos.co.il (Postfix) with ESMTPSA id 38F7144070E;\n\tWed, 30 Aug 2017 15:01:14 +0300 (IDT)" ], "X-Virus-Scanned": [ "amavisd-new at osuosl.org", "amavisd-new at osuosl.org" ], "X-Greylist": "domain auto-whitelisted by SQLgrey-1.7.6", "From": "Baruch Siach <baruch@tkos.co.il>", "To": "buildroot@busybox.net", "Date": "Wed, 30 Aug 2017 15:01:04 +0300", "Message-Id": "<10033e7b173d98374eac45d28e1fb97f68e82118.1504094464.git.baruch@tkos.co.il>", "X-Mailer": "git-send-email 2.14.1", "Subject": "[Buildroot] [PATCH] gnupg: security bump to version 1.4.22", "X-BeenThere": "buildroot@busybox.net", "X-Mailman-Version": "2.1.18-1", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.busybox.net>", "List-Unsubscribe": "<http://lists.busybox.net/mailman/options/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=unsubscribe>", "List-Archive": "<http://lists.busybox.net/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@busybox.net>", "List-Help": "<mailto:buildroot-request@busybox.net?subject=help>", "List-Subscribe": "<http://lists.busybox.net/mailman/listinfo/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=subscribe>", "MIME-Version": "1.0", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@busybox.net", "Sender": "\"buildroot\" <buildroot-bounces@busybox.net>" }, "content": "Mitigate a flush+reload side-channel attack on RSA secret keys\ndubbed \"Sliding right into disaster\". For details see\n<https://eprint.iacr.org/2017/627>. [CVE-2017-7526]\n\nSwitch to https site for better firewall compatibility and security.\n\nSigned-off-by: Baruch Siach <baruch@tkos.co.il>\n---\n package/gnupg/gnupg.hash | 7 +++----\n package/gnupg/gnupg.mk | 4 ++--\n 2 files changed, 5 insertions(+), 6 deletions(-)", "diff": "diff --git a/package/gnupg/gnupg.hash b/package/gnupg/gnupg.hash\nindex 8968b00d2b16..abd76cde9c5e 100644\n--- a/package/gnupg/gnupg.hash\n+++ b/package/gnupg/gnupg.hash\n@@ -1,4 +1,3 @@\n-# From https://lists.gnu.org/archive/html/info-gnu/2016-08/msg00008.html\n-sha1\te3bdb585026f752ae91360f45c28e76e4a15d338\tgnupg-1.4.21.tar.bz2\n-# Locally computed\n-sha256\t6b47a3100c857dcab3c60e6152e56a997f2c7862c1b8b2b25adf3884a1ae2276\tgnupg-1.4.21.tar.bz2\n+# Locally computed based on signature\n+# https://gnupg.org/ftp/gcrypt/gnupg/gnupg-1.4.22.tar.bz2.sig\n+sha256\t9594a24bec63a21568424242e3f198b9d9828dea5ff0c335e47b06f835f930b4\tgnupg-1.4.22.tar.bz2\ndiff --git a/package/gnupg/gnupg.mk b/package/gnupg/gnupg.mk\nindex b3578b87df99..0ed3e1e063fe 100644\n--- a/package/gnupg/gnupg.mk\n+++ b/package/gnupg/gnupg.mk\n@@ -4,9 +4,9 @@\n #\n ################################################################################\n \n-GNUPG_VERSION = 1.4.21\n+GNUPG_VERSION = 1.4.22\n GNUPG_SOURCE = gnupg-$(GNUPG_VERSION).tar.bz2\n-GNUPG_SITE = ftp://ftp.gnupg.org/gcrypt/gnupg\n+GNUPG_SITE = https://gnupg.org/ftp/gcrypt/gnupg\n GNUPG_LICENSE = GPL-3.0+\n GNUPG_LICENSE_FILES = COPYING\n GNUPG_DEPENDENCIES = zlib ncurses $(if $(BR2_PACKAGE_LIBICONV),libiconv)\n", "prefixes": [] }