hplip/hplip-3.15.6.CVE-2015-0839.patch
2015-06-24 14:13:45 +00:00

22 lines
836 B
Diff

From: Andreas Stieger <astieger@suse.com>
Date: Fri, 19 Jun 2015 13:26:52 +0200
Subject: [PATCH] use 0xlong key ID
Upstream: via package maintainer
References: https://bugzilla.suse.com/show_bug.cgi?id=933191 CVE-2015-0839
Use 0xlong key ID, short of shipping the key or full fingerprint.
Index: hplip-3.15.6/base/validation.py
===================================================================
--- hplip-3.15.6.orig/base/validation.py
+++ hplip-3.15.6/base/validation.py
@@ -42,7 +42,7 @@ class DigiSign_Verification(object):
class GPG_Verification(DigiSign_Verification):
- def __init__(self, pgp_site = 'pgp.mit.edu', key = 0xA59047B9):
+ def __init__(self, pgp_site = 'pgp.mit.edu', key = 0x73D770CDA59047B9):
self.__pgp_site = pgp_site
self.__key = key
self.__gpg = utils.which('gpg',True)