projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2001bf9) | patch
gnupg: security bump to version 1.4.17
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Wed, 25 Jun 2014 18:41:54 +0000 (15:41 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Wed, 25 Jun 2014 20:29:53 +0000 (22:29 +0200)
commit2402634f5a2142202f2b34e206fbebaf58ca1a3c
treef122a12d0be643e98035acab94f29b747e113b14tree
parent2001bf94bf1c23b0b7e5851cf4488971e1cd7b38commit | diff
gnupg: security bump to version 1.4.17

Fixes CVE-2014-4617: The do_uncompress function in g10/compress.c in
GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent
attackers to cause a denial of service (infinite loop) via malformed
compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/gnupg/gnupg.mk diff | blob | history