GitLab

See: #13051

busybox 1.31 was never affected by CVE-2021-42375. We already added it
to '0:' in cd1f8de0

fixes #13192

https://www.postgresql.org/docs/release/12.9/

- CVE-2021-42374
- CVE-2021-42378
- CVE-2021-42379
- CVE-2021-42380
- CVE-2021-42381
- CVE-2021-42382
- CVE-2021-42383
- CVE-2021-42384
- CVE-2021-42385
- CVE-2021-42386

awk patch is basically a diff from 1.31.0 -> 1.34.0.

busybox 1.31 was never affected by CVE-2021-42375
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/

The keys currently in use are 2048-bits. To future-proof ourselves, add
new 4096-bits rsa keys. These are currently in use by the v3.15 stable
builders.

source for v2.4.51 is only available there.

Fixes error introduced in 7dab305c.

WTF is this crap?!

    make[2]: Entering directory '/home/buildozer/aports/main/gnupg/src/gnupg-2.2.23/doc'
    : >defsincdate ; \
    if test -e ../.git; then \
      (cd . && git log -1 --format='%ct' \
                   -- gpg.texi gpgsm.texi gpg-agent.texi scdaemon.texi instguide.texi tools.texi debugging.texi glossary.texi contrib.texi gpl.texi sysnotes.texi dirmngr.texi wks.texi gnupg-module-overview.svg gnupg-card-architecture.fig howtos.texi howto-create-a-server-cert.texi 2>/dev/null) >>defsincdate; \
            elif test x"OURCE_DATE_EPOCH" != x; then   \
       echo "OURCE_DATE_EPOCH" >>defsincdate ; \
    fi
    gcc -I. -I.. -I. -DLOCALEDIR=\"/usr/share/locale\" -DGNUPG_BINDIR="\"/usr/bin\"" -DGNUPG_LIBEXECDIR="\"/usr/libexec\"" -DGNUPG_LIBDIR="\"/usr/lib/gnupg\"" -DGNUPG_DATADIR="\"/usr/share/gnupg\"" -DGNUPG_SYSCONFDIR="\"/etc/gnupg\"" -DGNUPG_LOCALSTATEDIR="\"/var\""       \
                            -o mkdefsinc ./mkdefsinc.c
    incd="`test -f defsincdate || echo './'`defsincdate"; \
    ./mkdefsinc -C . --date "`cat $incd 2>/dev/null`" \
        gpg.texi gpgsm.texi gpg-agent.texi scdaemon.texi instguide.texi tools.texi debugging.texi glossary.texi contrib.texi gpl.texi sysnotes.texi dirmngr.texi wks.texi gnupg-module-overview.svg gnupg-card-architecture.fig howtos.texi howto-create-a-server-cert.texi >defs.inc
    mkdefsinc: bad date 'OURCE_DATE_EPOCH'
    make[2]: *** [Makefile:1245: defs.inc] Error 1

Introduced in b70c9119

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25125

hkps.pool.sks-keyservers.net is dead. This patch backports the change of
the default keyserver from newer versions of gnupg to keyserver.ubuntu.com.

fixes several bugs introduced in 7.79.0

- CVE-2021-40438
- CVE-2021-39275
- CVE-2021-36160
- CVE-2021-34798
- CVE-2021-33193

See: #12950

- CVE-2021-38115
- CVE-2021-40145