From patchwork Wed Feb 7 19:42:33 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Julien Olivain X-Patchwork-Id: 1896309 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org; envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org) Received: from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4TVVrn3VLgz23hR for ; Thu, 8 Feb 2024 06:42:49 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by smtp4.osuosl.org (Postfix) with ESMTP id 4AF6B42203; Wed, 7 Feb 2024 19:42:47 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp4.osuosl.org ([127.0.0.1]) by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EBMrdkdQsTfI; Wed, 7 Feb 2024 19:42:46 +0000 (UTC) X-Comment: SPF check N/A for local connections - client-ip=140.211.166.34; helo=ash.osuosl.org; envelope-from=buildroot-bounces@buildroot.org; receiver= DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org 40E6142206 Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by smtp4.osuosl.org (Postfix) with ESMTP id 40E6142206; Wed, 7 Feb 2024 19:42:46 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from smtp4.osuosl.org (smtp4.osuosl.org [140.211.166.137]) by ash.osuosl.org (Postfix) with ESMTP id B21CA1BF350 for ; Wed, 7 Feb 2024 19:42:44 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp4.osuosl.org (Postfix) with ESMTP id 9EEEA42206 for ; Wed, 7 Feb 2024 19:42:44 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp4.osuosl.org ([127.0.0.1]) by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8y9_wchrJde for ; Wed, 7 Feb 2024 19:42:43 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a01:e0c:1:1599::12; helo=smtp3-g21.free.fr; envelope-from=ju.o@free.fr; receiver= DMARC-Filter: OpenDMARC Filter v1.4.2 smtp4.osuosl.org 95BB642203 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org 95BB642203 Received: from smtp3-g21.free.fr (smtp3-g21.free.fr [IPv6:2a01:e0c:1:1599::12]) by smtp4.osuosl.org (Postfix) with ESMTPS id 95BB642203 for ; Wed, 7 Feb 2024 19:42:42 +0000 (UTC) Received: from home.juju.sh (unknown [IPv6:2a01:e0a:485:b220:64fe:9015:874f:9d44]) (Authenticated sender: ju.o@free.fr) by smtp3-g21.free.fr (Postfix) with ESMTPSA id C4BEE13F88E; Wed, 7 Feb 2024 20:42:38 +0100 (CET) From: Julien Olivain To: buildroot@buildroot.org Date: Wed, 7 Feb 2024 20:42:33 +0100 Message-ID: <20240207194233.590328-1-ju.o@free.fr> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-Mailman-Original-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=free.fr; s=smtp-20201208; t=1707334960; bh=/AmhWw0OBWbsXnVVByBTrZmChfLnAFTRl7qLFuV+PSM=; h=From:To:Cc:Subject:Date:From; b=GKmdEF8S87Iym67PHiavtX1uPiaQ+QBrAVEGMbpzeyHoZa+BNRZUYwK2MNoNozJ2Y XTwpYCM0Iox2tNiEqq3BBqyWCP91hSQXnhipRwIEROI1Ggyemu3Er/WA4U6Tcl8lIA dzfBNSkCr40mT9b4jh/75x9TJZZi9tAvtBjb4aq5aSxIuDc3UTZpZvlCnTHlH4i3UP zhLFoYnPy7eZHCzIU940kd/94xSKrnpagVrLo03MWxrRwekYZgSBxRlVC0pawXZF8N khaa9AZF350PAz2jBD15FTQgHFk98fpvnLgV0sdoo3yW4M4wetqMQ50VaFoIpQYtOe 9sKWFDaiHPdtQ== X-Mailman-Original-Authentication-Results: smtp4.osuosl.org; dmarc=pass (p=none dis=none) header.from=free.fr X-Mailman-Original-Authentication-Results: smtp4.osuosl.org; dkim=pass (2048-bit key) header.d=free.fr header.i=@free.fr header.a=rsa-sha256 header.s=smtp-20201208 header.b=GKmdEF8S Subject: [Buildroot] [PATCH 1/1] package/gnupg2: security bump to version 2.4.4 X-BeenThere: buildroot@buildroot.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Julien Olivain Errors-To: buildroot-bounces@buildroot.org Sender: "buildroot" See release announce: https://lists.gnupg.org/pipermail/gnupg-announce/2024q1/000481.html For the details about the security advisory for GnuPG created smartcard keys, see: https://gnupg.org/blog/20240125-smartcard-backup-key.html This commit also drops the package patch, which is now included in this new version. Signed-off-by: Julien Olivain --- ...he-call-of-ks_ldap_help_variables-wh.patch | 36 ------------------- package/gnupg2/gnupg2.hash | 4 +-- package/gnupg2/gnupg2.mk | 2 +- 3 files changed, 3 insertions(+), 39 deletions(-) delete mode 100644 package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch diff --git a/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch b/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch deleted file mode 100644 index 53dd39cf47..0000000000 --- a/package/gnupg2/0001-dirmngr-Enable-the-call-of-ks_ldap_help_variables-wh.patch +++ /dev/null @@ -1,36 +0,0 @@ -From dc13361524c1477b2106c7385f2059f9ea111b84 Mon Sep 17 00:00:00 2001 -From: NIIBE Yutaka -Date: Wed, 5 Jul 2023 09:29:54 +0900 -Subject: [PATCH] dirmngr: Enable the call of ks_ldap_help_variables when - USE_LDAP. - -* dirmngr/server.c [USE_LDAP] (cmd_ad_query): Conditionalize. - --- - -Signed-off-by: NIIBE Yutaka - -Upstream: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=dc13361524c1477b2106c7385f2059f9ea111b84 - -Signed-off-by: Bernd Kuhls ---- - dirmngr/server.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/dirmngr/server.c b/dirmngr/server.c -index 51a149cb2..ee61f63d6 100644 ---- a/dirmngr/server.c -+++ b/dirmngr/server.c -@@ -2776,7 +2776,9 @@ cmd_ad_query (assuan_context_t ctx, char *line) - - if (opt_help) - { -+#if USE_LDAP - ks_ldap_help_variables (ctrl); -+#endif - err = 0; - goto leave; - } --- -2.11.0 - diff --git a/package/gnupg2/gnupg2.hash b/package/gnupg2/gnupg2.hash index 4b770fa520..c821afb55e 100644 --- a/package/gnupg2/gnupg2.hash +++ b/package/gnupg2/gnupg2.hash @@ -1,5 +1,5 @@ # From https://www.gnupg.org/download/integrity_check.html -sha1 79a60c8e415e3daaa33d0546398174252a56f7ac gnupg-2.4.3.tar.bz2 -sha256 a271ae6d732f6f4d80c258ad9ee88dd9c94c8fdc33c3e45328c4d7c126bd219d gnupg-2.4.3.tar.bz2 +sha1 228b3984325fdeebc5e3f2d165c6419a5ebc28de gnupg-2.4.4.tar.bz2 +sha256 67ebe016ca90fa7688ce67a387ebd82c6261e95897db7b23df24ff335be85bc6 gnupg-2.4.4.tar.bz2 # Locally calculated sha256 bc2d6664f6276fa0a72d57633b3ae68dc7dcb677b71018bf08c8e93e509f1357 COPYING diff --git a/package/gnupg2/gnupg2.mk b/package/gnupg2/gnupg2.mk index d21c1e242d..986da4790c 100644 --- a/package/gnupg2/gnupg2.mk +++ b/package/gnupg2/gnupg2.mk @@ -4,7 +4,7 @@ # ################################################################################ -GNUPG2_VERSION = 2.4.3 +GNUPG2_VERSION = 2.4.4 GNUPG2_SOURCE = gnupg-$(GNUPG2_VERSION).tar.bz2 GNUPG2_SITE = https://gnupg.org/ftp/gcrypt/gnupg GNUPG2_LICENSE = GPL-3.0+