mirror of
https://git.busybox.net/buildroot.git
synced 2024-12-05 03:13:41 +08:00
918a9fb455
Fixes the following security issues: CVE-2020-25125: Importing an OpenPGP key having a preference list for AEAD algorithms will lead to an array overflow and thus often to a crash or other undefined behaviour (affected: 2.2.21 / 2.2.22) For more details, see the announcement: https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
8 lines
487 B
Plaintext
8 lines
487 B
Plaintext
# From https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.html
|
|
sha1 bd949b4af7426e4afc13667d678503063c6aa4b5 gnupg-2.2.23.tar.bz2
|
|
# Calculated based on the hash above and signature
|
|
# https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.2.23.tar.bz2.sig
|
|
# using key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
|
|
sha256 10b55e49d78b3e49f1edb58d7541ecbdad92ddaeeb885b6f486ed23d1cd1da5c gnupg-2.2.23.tar.bz2
|
|
sha256 bc2d6664f6276fa0a72d57633b3ae68dc7dcb677b71018bf08c8e93e509f1357 COPYING
|