summaryrefslogtreecommitdiffstats
path: root/package/gnupg
Commit message (Collapse)AuthorAgeFilesLines
* gnupg: drop mandatory dependency on ncursesTrent Piepho2018-10-042-3/+2
| | | | | | | | | | | | | | | This package only needs ncurses when readline support is enabled, as it's the autoconf macro file for readline (used by autoconf to create the gnupg configure script) that checks for and pulls in ncurses. Since readline already depends on ncurses, gnupg need only depend on readline (when enabled). The host package always forces readline support off, so the host-ncurses dependency can be removed entirely. Signed-off-by: Trent Piepho <tpiepho@impinj.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* gnupg: security bump to version 1.4.23Baruch Siach2018-06-112-3/+3
| | | | | | | | Fixes CVE-2018-12020: Unsanitized file names might cause injection of terminal control characters into the status output of gnupg. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: fix prompt of Config.in.hostThomas Petazzoni2018-04-011-1/+1
| | | | | | | It should be "host gnupg" and not "host-gnupg" to be consistent with all other Config.in.host options. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* gnupg: add host packagePeter Korsgaard2017-12-122-0/+25
| | | | | | | | | | | | For E.G. post-build / post-image scripts as it generally cannot be expected to be available on the build host and/or there are some differences in behaviour between gnupg 1.x / 2.x. Provide gnupg 1.x instead of 2.x, as it is simpler to build (less dependencies) and easier to use in post-build / post-image scripts (E.G. no gpg-agent that keeps running in the background). Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: security bump to version 1.4.22Baruch Siach2017-08-302-6/+5
| | | | | | | | | | | Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Switch to https site for better firewall compatibility and security. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages/g*/Config.in: fix ordering of statementsAdam Duskett2017-05-011-1/+1
| | | | | | | | | | | | | The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter g in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: enable support for SHA-256 and SHA-512 hashesJack Breese2017-04-081-1/+6
| | | | | Signed-off-by: Jack Breese <jack@kumunetworks.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, package: use SPDX short identifier for GPLv3/GPLv3+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for GPLv3/GPLv3+ is GPL-3.0/GPL-3.0+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv3\>/GPL-3.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: security bump to version 1.4.21Baruch Siach2016-08-182-3/+5
| | | | | | | | | | Fixes CVE-2016-6313: An attacker who obtains 580 bytes from the standard RNG can trivially predict the next 20 bytes of output. Add cryptographically secure sha256 hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: disable assembly optimization for coldfireWaldemar Brodkorb2016-08-051-0/+5
| | | | | | | | Fixes: http://autobuild.buildroot.net/results/d25425cff055a14b9285cefb0775bc138eb2f914/ Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: bump to version 1.4.20Gustavo Zacarias2015-12-202-3/+3
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: add option for AES cipherPeter Korsgaard2015-07-022-0/+11
| | | | | | | | | | Similar to our RSA option. Enabling this adds ~17K to the gpg binary (ARMv7): ls -lah output/target/usr/bin/gpg{.orig,} -rwxr-xr-x 1 peko peko 532K Jul 2 17:29 output/target/usr/bin/gpg -rwxr-xr-x 1 peko peko 515K Jul 2 17:29 output/target/usr/bin/gpg.orig Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: security bump to version 1.4.19Gustavo Zacarias2015-02-282-3/+3
| | | | | | | | | | Fixes: CVE-2014-3591 - Use ciphertext blinding for Elgamal decryption CVE-2015-0837 - Fixed data-dependent timing variations in modular exponentiation. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: don't bother removing a man pageThomas Petazzoni2014-12-011-2/+1
| | | | | | | | | | The target-finalize target in the main Makefile removes $(TARGET_DIR)/usr/share/man entirely, so there's no point in having some package specific logic to remove man pages. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: add hash fileGustavo Zacarias2014-10-071-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-6/+6
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: make gnupg and gnupg2 mutually exclusiveVicente Olivert Riera2014-07-231-0/+1
| | | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Reviewed-by: Markos Chandras <Markos.Chandras@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: security bump to version 1.4.18Gustavo Zacarias2014-07-171-1/+1
| | | | | | | | | | Fixes CVE-2014-4617 (The do_uncompress function in g10/compress.c allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: security bump to version 1.4.17Gustavo Zacarias2014-06-251-1/+1
| | | | | | | | | | Fixes CVE-2014-4617: The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: depend on libiconv if appropriateBernd Kuhls2014-02-041-1/+1
| | | | | | | | | | | If iconv is built before gnupg, this package will link against it; if it is built after this package, it will not be linked against it. To make the build reproducible, make sure that iconv is always built before this package. Signed-off-by: Bernd Kuhls <berndkuhls@hotmail.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: bump versionPeter Korsgaard2013-12-192-21/+1
| | | | | | | | | | And drop patch now upstream. Security fix (CVE-2013-4576), see: http://lists.gnupg.org/pipermail/gnupg-devel/2013-December/028102.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: security bump to version 1.4.15Gustavo Zacarias2013-10-091-1/+1
| | | | | | | Fixes CVE-2013-4402. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: option to include RSA support.Peter Sanford2013-10-012-0/+11
| | | | | | | | | | gnupg is compiled with --enable-minimal flag. This produces a binary that only supports ElGamal and DSA public key algorithms. RSA has been the default for `gpg --gen-key` since 2009, so it makes sense to be able to build a gnupg binary that supports it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnupg: security bump to version 1.4.14Gustavo Zacarias2013-08-051-1/+1
| | | | | | | Fixes CVE-2013-4242. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Normalize separator size to 80Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* gnupg: security bump to version 1.4.13Gustavo Zacarias2013-01-021-1/+1
| | | | | | | Fixes CVE-2012-6085. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* gnupg: fix build failure on MIPS64Thomas Petazzoni2012-12-161-0/+20
| | | | | | | | | Fixes: http://autobuild.buildroot.org/results/49d5891dcecf2cce8de9f2bdb16a76ff86579f45/build-end.log Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* gnupg: don't prefix assembly level functions with underscorePeter Korsgaard2012-10-161-0/+1
| | | | | | | | | | Fixes http://autobuild.buildroot.net/results/45a0856bafa9f2f7e86e2c063528c2b5b04c08d6 gnupg's configure script defaults to prepending an underscore ('_') to the assembly level functions, which isn't correct for Linux and causes linker errors for the archs where it has asm optimizations. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: add gnupgPeter Korsgaard2012-10-152-0/+83
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
OpenPOWER on IntegriCloud