* gpg: Allow for signature subpackets of up to 30000 octets. [rG36dbca3e69] * gpg: Silence expired trusted-key diagnostics in quiet mode. [T7351] * gpg: Allow smaller session keys with Kyber and enforce the use of AES-256 if useful. [T7472] * gpg: Fix regression in key generation from existing card key. [T7309,T7457] * gpg: Print a warning if the card backup key could not be written. [T2169] * The --supervised options of gpg-agent and dirmngr have been renamed to --deprecated-supervised as preparation for their removal. [rGa019a0fcd8] * There is no more default for a keyserver. OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=313
36 lines
1.2 KiB
Diff
36 lines
1.2 KiB
Diff
Index: gnupg-2.2.16/g10/gpg.c
|
|
===================================================================
|
|
--- gnupg-2.2.16.orig/g10/gpg.c
|
|
+++ gnupg-2.2.16/g10/gpg.c
|
|
@@ -973,7 +973,7 @@ make_libversion (const char *libname, co
|
|
|
|
if (maybe_setuid)
|
|
{
|
|
- gcry_control (GCRYCTL_INIT_SECMEM, 0, 0); /* Drop setuid. */
|
|
+ gcry_control (GCRYCTL_INIT_SECMEM, 4096, 0); /* Drop setuid. */
|
|
maybe_setuid = 0;
|
|
}
|
|
s = getfnc (NULL);
|
|
@@ -1125,7 +1125,7 @@ build_list (const char *text, char lette
|
|
char *string;
|
|
|
|
if (maybe_setuid)
|
|
- gcry_control (GCRYCTL_INIT_SECMEM, 0, 0); /* Drop setuid. */
|
|
+ gcry_control (GCRYCTL_INIT_SECMEM, 4096, 0); /* Drop setuid. */
|
|
|
|
indent = utf8_charcount (text, -1);
|
|
len = 0;
|
|
Index: gnupg-2.2.16/sm/gpgsm.c
|
|
===================================================================
|
|
--- gnupg-2.2.16.orig/sm/gpgsm.c
|
|
+++ gnupg-2.2.16/sm/gpgsm.c
|
|
@@ -533,7 +533,7 @@ make_libversion (const char *libname, co
|
|
|
|
if (maybe_setuid)
|
|
{
|
|
- gcry_control (GCRYCTL_INIT_SECMEM, 0, 0); /* Drop setuid. */
|
|
+ gcry_control (GCRYCTL_INIT_SECMEM, 4096, 0); /* Drop setuid. */
|
|
maybe_setuid = 0;
|
|
}
|
|
s = getfnc (NULL);
|