summaryrefslogtreecommitdiffstats
path: root/package/gnupg2
Commit message (Collapse)AuthorAgeFilesLines
* gnupg2: security bump to version 2.2.12Baruch Siach2019-01-152-5/+5
| | | | | | | | | | Fixes CVE-2018-1000858: Cross Site Request Forgery with arbitrary HTTPS GET requests via HTTP redirect. https://sektioneins.de/en/advisories/advisory-012018-gnupg-wkd.html Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: bump to version 2.2.10Baruch Siach2018-11-012-5/+6
| | | | | Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* gnupg2: security bump to version 2.2.8Baruch Siach2018-06-112-5/+5
| | | | | | | | | Fixes CVE-2018-12020: Unsanitized file names might cause injection of terminal control characters into the status output of gnupg. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: bump to version 2.2.7Baruch Siach2018-05-042-5/+5
| | | | | | Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* gnupg2: security bump to version 2.2.6Baruch Siach2018-04-252-6/+6
| | | | | | | | | | | | Fixes CVE-2018-9234: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys. Remove --disable-doc from configure options. We pass this options to all autotools packages. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* gnupg2: bump to version 2.2.5Baruch Siach2018-02-282-5/+5
| | | | | | Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: bump to version 2.2.4Baruch Siach2018-01-122-5/+6
| | | | | | | | Add license hash. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: bump to version 2.2.3Baruch Siach2017-12-142-5/+5
| | | | | | Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump to version 2.2.2Baruch Siach2017-11-272-5/+5
| | | | | | Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: don't preserve the old gpg2 executable nameBaruch Siach2017-11-272-9/+7
| | | | | | | | | | | | | | | Commit e82fadab236a (gnupg2: bump to version 2.2.0) added a configure option to keep the old 'gpg2' executable name to avoid conflict with the gnupg package. It turns out that gnupg depends on !BR2_PACKAGE_GNUPG2 since commit 2cadb26e6d4 (gnupg: make gnupg and gnupg2 mutually exclusive). Drop this configure option. Rename the config option that controls the removal of gpgv2, now gpgv, to match the new name. Add legacy config symbol handling. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump to version 2.2.0Baruch Siach2017-09-032-6/+9
| | | | | | | | | | | | Switch to https download for firewall compatibility and security. As upstream now defaults to 'gpg' for the main binary name, keep the 'gpg2' name as in previous releases, to avoid conflict with the gnupg package. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: drop non-wchar toolchain workaroundBaruch Siach2017-09-031-1/+0
| | | | | | | | | | | | gnupg2 removed gnulib in version 2.1.1. The workaround for non-wchar toolchains introduced in commit 8a878870958 (gnupg2: fix build on non-wchar toolchains), is no longer needed. Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Cc: Romain Naour <romain.naour@openwide.fr> Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: switch optional dependency to libusbBaruch Siach2017-09-031-2/+2
| | | | | | | | gnupg2 migrated to libusb-1.0 in version 2.1.12. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump version to 2.1.21Vicente Olivert Riera2017-05-172-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages/g*/Config.in: fix ordering of statementsAdam Duskett2017-05-011-4/+4
| | | | | | | | | | | | | The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter g in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump version to 2.1.20Vicente Olivert Riera2017-04-042-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, package: use SPDX short identifier for GPLv3/GPLv3+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for GPLv3/GPLv3+ is GPL-3.0/GPL-3.0+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv3\>/GPL-3.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: fix libusb detectionBernd Kuhls2017-03-211-0/+1
| | | | | | | | | | | gnupg2 does not use pkgconf to detect the include dir of libusb. Fixes http://autobuild.buildroot.net/results/70c/70c9f5f8ae77fbda2b5eba3aacf831430dc59a1c/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: add optional support for gnutlsBernd Kuhls2017-03-191-0/+7
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: add optional support for sqliteBernd Kuhls2017-03-191-1/+8
| | | | | | | | | | | | | Also add host-pkgconf to detect sqlite support, otherwise checking pkg-config is at least version 0.9.0... ./configure: line 7981: /home/buildroot/br2/output/host/usr/bin/pkg-config: No such file or directory no [...] checking for SQLITE3... no Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: bump version to 2.1.19Bernd Kuhls2017-03-197-118/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | Support for GnuPG 2.0 will end 2017-12-31: https://lists.gnupg.org/pipermail/gnupg-announce/2017q1/000402.html Removed all patches: - 0001-fix-pth-config-usage.patch Not needed anymore, gnupg2 now depends on libnpth: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=001352077cdc7e402421c77328bea1a052005673 - 0002-missing-include.patch Not needed anymore after upstream commit https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=0367a4b8cfbf1f197e093ca2b83b27e0a409c3c7 - 0003-dont-run-tests.patch Not needed anymore after upstream commit https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=4a232d23a8f51bebf9ee382e480248b4bde30f28 - 0004-silence-git-when-not-in-git-tree.patch Not needed anymore after upstream commit restricting the usage of git commands to the case where the directory .git exists https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=b67e4e523e6d19d384e23c5bb03010caebd150e7 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libgpg-error: bump to version 1.23Jörg Krause2016-07-041-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch is based on a patch sent by Vicente Olivert Riera and commented by Arnout Vandecappelle [1]. - Bump version to 1.23 - Add a hook to fix cross-compilation - Fix license and license files - Remove patch applied upstream - Add a BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS variable - Propagate the dependencies using that variable: * package/cppcms * package/crda * package/gnupg2 - package/gcr - package/midori * package/kodi * package/libaacs * package/libassuan * package/libgcrypt * package/libgpgme * package/libksba * package/libmicrohttpd - package/janus-gateway - package/kodi - package/ola - package/systemd * package/libssh * package/libssh2 - package/php-ssh2 * package/netatalk * package/network-manager * package/ntfs-3g * package/opkg * package/php-gnupg * package/rng-tools * package/strongswan * package/vpnc [1] http://patchwork.ozlabs.org/patch/416427/ Cc: Arnout Vandecappelle <arnout@mind.be> Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> [Thomas: - rebase on master - changing systemd no longer needed, as it no longer selects libgcrypt.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> [Maxime: - rebase on master - bump to new version - propagate dependencies to missing packages] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - fix hash file. - change the way to handle the various arch so that it works properly for uClibc. - add nios2 arch support. - Maxime Hadjinlian learned some basic Emacs-fu to do the final fixups of this commit.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump to version 2.0.30Gustavo Zacarias2016-03-312-3/+5
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: add optional support for libusb-compatBernd Kuhls2016-02-211-0/+7
| | | | | | | | | | | | | When libusb-compat was compiled before, gnupg2 will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/libexec/scdaemon | grep NEEDED [...] 0x0000000000000001 (NEEDED) Shared library: [libusb-0.1.so.4] [...] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: really do not run tests in cross-compilationYann E. MORIN2015-12-164-16/+82
| | | | | | | | | | | | | | | | | | | | gnupg2 still tries to run test even if it tries to avoid it in cross-compilation. Really disable running the tests. Since that requires a complete autoreconf, the existing patch against configure is turned into a patch against the m4 macro. since we autoreconf, we slightly patch configure.ac to not emit git errors on stderr because it is not in a git tree. [Thomas: rename patch 0000 to 0004, as suggested by Arnout.] Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: fix build with muslYann E. MORIN2015-12-161-0/+15
| | | | | | | | | | | | | Add a missing include to get select(). Fixes: http://autobuild.buildroot.org/results/8b2/8b282f546dc36f4bf9c25721cdf922c7a7ba340b/ http://autobuild.buildroot.org/results/dc1/dc192255b1fcae18db8b98e65309e5c1493bdbc1/ http://autobuild.buildroot.org/results/4c0/4c0ab2b28500a28945da3f4df742d8c2e2f21cd0/ ... Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump version to 2.0.29Vicente Olivert Riera2015-09-112-3/+3
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump to version 2.0.28Gustavo Zacarias2015-06-042-3/+3
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: needs dynamic library supportBaruch Siach2015-03-011-0/+5
| | | | | | | | | Fixes: http://autobuild.buildroot.net/results/d2f/d2fc4cfb0c42d352d1119d8196d6df5fc2ab4be2/ http://autobuild.buildroot.net/results/4ff/4ff76c7da4c50f10d2194a1c50c6c10adaf6f8b6/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: security bump to version 2.0.27Baruch Siach2015-02-272-3/+3
| | | | | | | | | | | | Fixes: CVE-2015-1606: Use after free, resulting from failure to skip invalid packets CVE-2015-1607: memcpy with overlapping ranges, resulting from incorrect bitwise left shifts Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/*: rename patches according to the new policyPeter Korsgaard2015-02-031-0/+0
| | | | | | | Autogenerated from rename-patch.py (http://patchwork.ozlabs.org/patch/403345) Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg2: add hash fileGustavo Zacarias2014-10-071-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-5/+5
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: fix build on non-wchar toolchainsThomas Petazzoni2014-10-011-0/+1
| | | | | | | | | | | | | | | | | | | | | | | The gnupg2 configure script checks whether <stdint.h> complies with C99. When doing this, it expects a number of WCHAR_* definitions to be present, which is not the case on non-wchar capable toolchains. The gnupg2 configure script then concludes that <stdint.h> is not C99-compliant and generates its own, which causes some build failures related to intmax_t being not defined. Since wchar is not actually used in gnupg2, this commit fixes this problem by forcing gnupg2 to think that our <stdint.h> is C99-compliant. Fixes: http://autobuild.buildroot.org/results/40f/40fff3bc304e1a83524f28be8f6afc2e217281ad/ And lots of similar issues. Thanks a lot for Romain Naour for the initial investigation and lots of discussion on IRC about this issue. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: Romain Naour <romain.naour@openwide.fr>
* package/gnupg2: add readline optional dependencyRomain Naour2014-10-011-0/+7
| | | | | | | | | | This is to improve build reproducibility. [Thomas: add --with-readline and --without-readline options to explicitly enable/disable readline usage.] Signed-off-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/gnupg2: add bzip2 optional dependencyRomain Naour2014-10-011-0/+7
| | | | | | | | | This is to improve build reproducibility. [Thomas: add --enable-bzip2 --with-bzip options.] Signed-off-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2014-09-011-1/+1
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * gnupg2: bump to version 2.0.26Gustavo Zacarias2014-08-271-1/+1
| | | | | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* | gnupg2: Needs a suitable iconv implementationVicente Olivert Riera2014-08-152-1/+3
|/ | | | | | | | | | | | | | | | gnupg2 needs a toolchain with locale support or a package which provides a suitable iconv implementation (libiconv). Otherwise it will fail at the configure phase with an error like this one: *** It is now required to build with support for iconv *** Please install a suitable iconv implementation. Fixes: http://autobuild.buildroot.net/results/8c9/8c93c28533dfebffa8b2e34b1421d3fa3cdeb278/ Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Reviewed-by: Markos Chandras <Markos.Chandras@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: security bump to version 2.0.25Gustavo Zacarias2014-08-041-1/+1
| | | | | | | | | | Fixes CVE-2014-4617 (The do_uncompress function in g10/compress.c allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: fix dependency on libpthsemThomas Petazzoni2014-07-241-2/+2
| | | | | | | | | | | | | Commit beb49d882e03d4596d40dafad21e50460a6f1ef0 ('gnupg2: new package') was incorrect in its dependency on libpthsem: it was selecting BR2_PACKAGE_PTHSEM while it should select BR2_PACKAGE_LIBPTHSEM. This commit fixes that. Fixes: http://autobuild.buildroot.org/results/6e0/6e02b42f01986a56c22c44658fa1e488c0a08e7c/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: new packageVicente Olivert Riera2014-07-233-0/+91
[Thomas: use libpthsem instead of pth, remove !uclibc dependency, minor formatting fixes in the .mk file.] Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Reviewed-by: Markos Chandras <Markos.Chandras@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud