diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-02-28 08:09:13 -0300 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2015-02-28 13:04:04 +0100 |
| commit | b6997c8e4c93ab4385c666d982d573f5e6f641fe (patch) | |
| tree | 00fe757183760b59c1e0e88cde4e6fe59aade5f7 | |
| parent | b3db3aba6e442da91e5b55ee97ac3c789849051c (diff) | |
| download | buildroot-b6997c8e4c93ab4385c666d982d573f5e6f641fe.tar.gz buildroot-b6997c8e4c93ab4385c666d982d573f5e6f641fe.zip | |
gnupg: security bump to version 1.4.19
Fixes:
CVE-2014-3591 - Use ciphertext blinding for Elgamal decryption
CVE-2015-0837 - Fixed data-dependent timing variations in modular
exponentiation.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| -rw-r--r-- | package/gnupg/gnupg.hash | 4 | ||||
| -rw-r--r-- | package/gnupg/gnupg.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/package/gnupg/gnupg.hash b/package/gnupg/gnupg.hash index d6733f58a1..ba38d38fba 100644 --- a/package/gnupg/gnupg.hash +++ b/package/gnupg/gnupg.hash @@ -1,2 +1,2 @@ -# Locally calculated after checking pgp signature -sha256 b7b5fdda78849955e0cdbc5a085f3a08f8b7fba126c622085debb62def5d6388 gnupg-1.4.18.tar.bz2 +# From http://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html +sha1 5503f7faa0a0e84450838706a67621546241ca50 gnupg-1.4.19.tar.bz2 diff --git a/package/gnupg/gnupg.mk b/package/gnupg/gnupg.mk index c0bf88c422..94f5d896aa 100644 --- a/package/gnupg/gnupg.mk +++ b/package/gnupg/gnupg.mk @@ -4,7 +4,7 @@ # ################################################################################ -GNUPG_VERSION = 1.4.18 +GNUPG_VERSION = 1.4.19 GNUPG_SOURCE = gnupg-$(GNUPG_VERSION).tar.bz2 GNUPG_SITE = ftp://ftp.gnupg.org/gcrypt/gnupg GNUPG_LICENSE = GPLv3+ |
