From patchwork Wed Jan 7 17:50:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9386 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4dmbDT1LH4z3wpC for ; Wed, 07 Jan 2026 17:50:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dmbDR4dx7z7N7 for ; Wed, 07 Jan 2026 17:50:47 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dmbDR0sfCz33B1 for ; Wed, 07 Jan 2026 17:50:47 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dmbDN21GDz334Q for ; Wed, 07 Jan 2026 17:50:44 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4dmbDN02GNz6Kk; Wed, 07 Jan 2026 17:50:43 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1767808244; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WATw6UQd4wlYC0/3cISALaCgWqc+mwPm+EAdzMM46Xw=; b=w6jg9UAd9MimyUinaaQLGaoV4bOu2BQicW4CGfo/ocXHwQQ56mJ7f+79V0hN4fQDcem16j 6Gdq57v8EgKmLZCw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1767808244; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WATw6UQd4wlYC0/3cISALaCgWqc+mwPm+EAdzMM46Xw=; b=TgjDziIkEMPt/lcRH1MlHJU729d5udcklj4HY3yzNItIvBlNW9pOEEf3rU3rZnnpLnStd0 WQcvWqfoWn8rRetuUZyZqmuYb89DhipZkTgUZ+xHGxOcsX4UDO6l+EzoBZmA9YgNE4YCcu zUDVc9LmEUDX0TD7kRNTtUgto0eM67/qiW/lHGehtzYZbymu9o+Dz2+cukQWlToouGC+1A oOFzXf8443abUjl+dunFidX4XIRnQRt+nJuH803A/nbpZrNcxbBLOPnE30dp1qQ/0Xbd9p 6TQNTz0yGYORMtq/e2QYfhlYUhSKaVhLzpuY2C36QKFqLHmOttQ/TA2FcwZirA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] gnupg: Update to version 2.4.9 Date: Wed, 7 Jan 2026 18:50:31 +0100 Message-ID: <20260107175037.3765287-5-adolf.belka@ipfire.org> In-Reply-To: <20260107175037.3765287-1-adolf.belka@ipfire.org> References: <20260107175037.3765287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.4.8 to 2.4.9 - No change to rootfile - The stable version is now 2.5.16 with originally 2.5 being the development branch that would become 2.6 but 2,5 has now been made the stable branch. The 2.4 branch will become EOL in 6 months. As gnupg was just recently changed from the 1.4 branch to the 2.4 branch and hasn't been tested out in a Testing/Release version I have just updated to the latest 2.4 version. - Once version 2.4.9 has been proven and is in a released CVU then I will do the update to the latest version in the 2.5 branch. - Changelog 2.4.9 * gpg: Fix possible memory corruption in the armor parser. [T7906] * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. [rGddb012be7f] * gpg: Error out on unverified output for non-detached signatures. [rG9d302f978b] * gpg: Do not allow compressed key packets on import. [T7014] * scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards. [T7662] * dirmngr: Do not require a keyserver for "gpg --fetch-key". [T7693] * agent: Fix ssh-agent's request_identities for skipped Brainpool keys. [rG6bf5696c85] Signed-off-by: Adolf Belka --- lfs/gnupg | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/gnupg b/lfs/gnupg index 653ff8bcb..80b4c513f 100644 --- a/lfs/gnupg +++ b/lfs/gnupg @@ -24,7 +24,7 @@ include Config -VER = 2.4.8 +VER = 2.4.9 THISAPP = gnupg-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = ab7126aac6c7bf323075c68084c963f75d93c729d8918b6ca10ef0a4466879636433c682a5437776d2ce9f5d432e1f66995dd94a4f44d7f184542f030087dbb2 +$(DL_FILE)_BLAKE2 = 5bbd278c570d3e389ab26dd37e1adac6c1b19f9bd369ebf30d75f48d0ab901c6f5fe4e4713b763f57b9e74efab654186ebff1a968348b0b9f70c82618b4b3b62 install : $(TARGET)