diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2014-08-04 14:48:02 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2014-08-04 20:08:54 +0200 |
| commit | 79c77a6e7fdf162e5609d46b00c99a7d177a381b (patch) | |
| tree | 4dc2eea69a5c729ef2d0bc43928ae175c66762b3 /package/gnupg2 | |
| parent | ac53822bb4b40161842f986faba3d5c9c9f99858 (diff) | |
gnupg2: security bump to version 2.0.25
Fixes CVE-2014-4617 (The do_uncompress function in g10/compress.c
allows context-dependent attackers to cause a denial of service
(infinite loop) via malformed compressed packets, as demonstrated by an
a3 01 5b ff byte sequence.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/gnupg2')
| -rw-r--r-- | package/gnupg2/gnupg2.mk | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/gnupg2/gnupg2.mk b/package/gnupg2/gnupg2.mk index fd35e6e3f..9502a8241 100644 --- a/package/gnupg2/gnupg2.mk +++ b/package/gnupg2/gnupg2.mk @@ -4,7 +4,7 @@ # ################################################################################ -GNUPG2_VERSION = 2.0.23 +GNUPG2_VERSION = 2.0.25 GNUPG2_SOURCE = gnupg-$(GNUPG2_VERSION).tar.bz2 GNUPG2_SITE = ftp://ftp.gnupg.org/gcrypt/gnupg GNUPG2_LICENSE = GPLv3+ |