Date: Tue, 1 Apr 2008 11:26:27 -0700 (PDT) From: Nick Barkas <snb@threerings.net> To: FreeBSD-gnats-submit@FreeBSD.org Cc: kuriyama@FreeBSD.org Subject: ports/122349: [patch] Update security/gnupg to 2.0.9 Message-ID: <20080401182628.6B9EA61DF1@smtp.earth.threerings.net> Resent-Message-ID: <200804011830.m31IU25a064016@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 122349
>Category: ports
>Synopsis: [patch] Update security/gnupg to 2.0.9
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Tue Apr 01 18:30:02 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Nick Barkas
>Release: FreeBSD 6.2-RELEASE-p11 i386
>Organization:
Three Rings Design
>Environment:
System: FreeBSD mail1.earth.threerings.net 6.2-RELEASE-p11 FreeBSD 6.2-RELEASE-p11 #0: Wed Feb 13 07:00:04 UTC 2008 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/SMP i386
>Description:
This is a patch to update the security/gnupg port to the latest version, which
fixes a possible security vulnerability involving memory corruption from
importing malicious keys.
>How-To-Repeat:
diff -urN gnupg.orig/Makefile gnupg/Makefile
--- gnupg.orig/Makefile Tue Mar 4 14:57:41 2008
+++ gnupg/Makefile Tue Apr 1 11:11:59 2008
@@ -6,7 +6,7 @@
#
PORTNAME= gnupg
-PORTVERSION= 2.0.8
+PORTVERSION= 2.0.9
CATEGORIES= security
MASTER_SITES= ${MASTER_SITE_GNUPG}
MASTER_SITE_SUBDIR= gnupg
diff -urN gnupg.orig/distinfo gnupg/distinfo
--- gnupg.orig/distinfo Tue Mar 4 14:57:41 2008
+++ gnupg/distinfo Tue Apr 1 11:15:01 2008
@@ -1,6 +1,6 @@
-MD5 (gnupg-2.0.8.tar.bz2) = fc4377ca67e1bf687eeaf22e79c0b9d1
-SHA256 (gnupg-2.0.8.tar.bz2) = 16f310afe4740a26475c7273f585861a4bdefecbde27c214cc30c0db45d26913
-SIZE (gnupg-2.0.8.tar.bz2) = 3654523
-MD5 (gnupg-2.0.8.tar.bz2.sig) = 5f4fefbca2568910e3628b4d8ea3d485
-SHA256 (gnupg-2.0.8.tar.bz2.sig) = e68772c8d16a80311c5380ef024c52ad140f2fc3cf43c778a2e2d3bf2eea24d5
-SIZE (gnupg-2.0.8.tar.bz2.sig) = 158
+MD5 (gnupg-2.0.9.tar.bz2) = b41f3f6716a74c46a609a71853e85c7b
+SHA256 (gnupg-2.0.9.tar.bz2) = 2dc124908a1dfa3b79d2b0a82aa1a31817128feb14e84a26226beaab13179686
+SIZE (gnupg-2.0.9.tar.bz2) = 3718925
+MD5 (gnupg-2.0.9.tar.bz2.sig) = 29a90f2bdd27d79b7e9a0885f119832a
+SHA256 (gnupg-2.0.9.tar.bz2.sig) = 75487ff94c980c0f6a0290f12290a1373f0b5f36971ed9910407490370340296
+SIZE (gnupg-2.0.9.tar.bz2.sig) = 158
--- gnupg.patch ends here ---
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080401182628.6B9EA61DF1>