[Buildroot] [PATCH] gnupg: security bump to version 1.4.22

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Wed Aug 30 20:07:52 UTC 2017


Hello,

On Wed, 30 Aug 2017 15:01:04 +0300, Baruch Siach wrote:
> Mitigate a flush+reload side-channel attack on RSA secret keys
> dubbed "Sliding right into disaster".  For details see
> <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526]
> 
> Switch to https site for better firewall compatibility and security.
> 
> Signed-off-by: Baruch Siach <baruch at tkos.co.il>
> ---
>  package/gnupg/gnupg.hash | 7 +++----
>  package/gnupg/gnupg.mk   | 4 ++--
>  2 files changed, 5 insertions(+), 6 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com



More information about the buildroot mailing list