diff options
| author | Roland Kovacs <roland.kovacs@est.tech> | 2025-06-26 10:00:11 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-07-07 07:42:58 -0700 |
| commit | ebbddcdb70eb5a733c04c50e650267e55fe4d844 (patch) | |
| tree | 728cef630bacbd2b934ffd87c1000a584852c569 /meta/recipes-support | |
| parent | fee92f72e194f76e69c36f2c0e23fe54fd779251 (diff) | |
| download | poky-ebbddcdb70eb5a733c04c50e650267e55fe4d844.tar.gz | |
gnupg: update 2.4.5 -> 2.4.8
This release includes fix for CVE-2025-30258.
Support for --enable-gpg-is-gpg2 config option has been partially removed in
version 2.4.6.
Changelog:
https://dev.gnupg.org/T7428
CVE: CVE-2025-30258
(From OE-Core rev: 41ef33ebf3e1a922aa44da8d75b240163d7954b1)
Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-support')
| -rw-r--r-- | meta/recipes-support/gnupg/gnupg_2.4.8.bb (renamed from meta/recipes-support/gnupg/gnupg_2.4.5.bb) | 11 |
1 files changed, 2 insertions, 9 deletions
diff --git a/meta/recipes-support/gnupg/gnupg_2.4.5.bb b/meta/recipes-support/gnupg/gnupg_2.4.8.bb index 97b5d8856c..9c5de263c5 100644 --- a/meta/recipes-support/gnupg/gnupg_2.4.5.bb +++ b/meta/recipes-support/gnupg/gnupg_2.4.8.bb | |||
| @@ -23,7 +23,7 @@ SRC_URI:append:class-native = " file://0001-configure.ac-use-a-custom-value-for- | |||
| 23 | file://relocate.patch" | 23 | file://relocate.patch" |
| 24 | SRC_URI:append:class-nativesdk = " file://relocate.patch" | 24 | SRC_URI:append:class-nativesdk = " file://relocate.patch" |
| 25 | 25 | ||
| 26 | SRC_URI[sha256sum] = "f68f7d75d06cb1635c336d34d844af97436c3f64ea14bcb7c869782f96f44277" | 26 | SRC_URI[sha256sum] = "b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616" |
| 27 | 27 | ||
| 28 | EXTRA_OECONF = "--disable-ldap \ | 28 | EXTRA_OECONF = "--disable-ldap \ |
| 29 | --disable-ccid-driver \ | 29 | --disable-ccid-driver \ |
| @@ -31,7 +31,6 @@ EXTRA_OECONF = "--disable-ldap \ | |||
| 31 | --with-bzip2=${STAGING_LIBDIR}/.. \ | 31 | --with-bzip2=${STAGING_LIBDIR}/.. \ |
| 32 | --with-readline=${STAGING_LIBDIR}/.. \ | 32 | --with-readline=${STAGING_LIBDIR}/.. \ |
| 33 | --with-mailprog=${sbindir}/sendmail \ | 33 | --with-mailprog=${sbindir}/sendmail \ |
| 34 | --enable-gpg-is-gpg2 \ | ||
| 35 | --disable-tests \ | 34 | --disable-tests \ |
| 36 | " | 35 | " |
| 37 | # yat2m can be found from recipe-sysroot-native non-deterministically with different versioning otherwise | 36 | # yat2m can be found from recipe-sysroot-native non-deterministically with different versioning otherwise |
| @@ -41,7 +40,6 @@ CACHED_CONFIGUREVARS += "ac_cv_path_YAT2M=./yat2m" | |||
| 41 | PACKAGES =+ "${PN}-gpg" | 40 | PACKAGES =+ "${PN}-gpg" |
| 42 | FILES:${PN}-gpg = " \ | 41 | FILES:${PN}-gpg = " \ |
| 43 | ${bindir}/gpg \ | 42 | ${bindir}/gpg \ |
| 44 | ${bindir}/gpg2 \ | ||
| 45 | ${bindir}/gpg-agent \ | 43 | ${bindir}/gpg-agent \ |
| 46 | " | 44 | " |
| 47 | 45 | ||
| @@ -61,11 +59,6 @@ do_configure:prepend () { | |||
| 61 | rm -f ${S}/m4/libgcrypt.m4 | 59 | rm -f ${S}/m4/libgcrypt.m4 |
| 62 | } | 60 | } |
| 63 | 61 | ||
| 64 | do_install:append() { | ||
| 65 | ln -sf gpg2 ${D}${bindir}/gpg | ||
| 66 | ln -sf gpgv2 ${D}${bindir}/gpgv | ||
| 67 | } | ||
| 68 | |||
| 69 | do_install:append:class-native() { | 62 | do_install:append:class-native() { |
| 70 | create_wrappers ${STAGING_BINDIR_NATIVE} | 63 | create_wrappers ${STAGING_BINDIR_NATIVE} |
| 71 | } | 64 | } |
| @@ -75,7 +68,7 @@ do_install:append:class-nativesdk() { | |||
| 75 | } | 68 | } |
| 76 | 69 | ||
| 77 | create_wrappers() { | 70 | create_wrappers() { |
| 78 | for i in gpg2 gpgconf gpg-agent gpg-connect-agent; do | 71 | for i in gpg gpgconf gpg-agent gpg-connect-agent; do |
| 79 | create_wrapper ${D}${bindir}/$i GNUPG_BINDIR=$1 | 72 | create_wrapper ${D}${bindir}/$i GNUPG_BINDIR=$1 |
| 80 | done | 73 | done |
| 81 | } | 74 | } |
