Related: RHEL-144668
This commit is contained in:
Jakub Jelen 2026-02-06 14:36:50 +01:00
parent 07b05a785c
commit 3631156b84

View File

@ -3,7 +3,7 @@
Summary: Utility for secure communication and data storage
Name: gnupg2
Version: 2.4.5
Release: 3%{?dist}
Release: 4%{?dist}
License: CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT
Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
@ -241,6 +241,9 @@ make -k check
%changelog
* Fri Feb 06 2026 Jakub Jelen <jjelen@redhat.com> - 2.4.5-4
- Fix CVE-2026-24882 (tpm2daemon buffer overflow)
* Tue Jan 13 2026 Jakub Jelen <jjelen@redhat.com> - 2.4.5-3
- Fix CVE-2025-68973 (gpg.fail/memcpy)
- Avoid weak dependencies