[PR PATCH] libksba: update to 1.6.3. CVE-2022-47629

[PR PATCH] libksba: update to 1.6.3. CVE-2022-47629

[crtxcr]

[-- Attachment #1: Type: text/plain, Size: 1150 bytes --]

There is a new pull request by crtxcr against master on the void-packages repository

https://github.com/crtxcr/void-packages update_libksba
https://github.com/void-linux/void-packages/pull/41254

libksba: update to 1.6.3. CVE-2022-47629
#### Testing the changes
- I tested the changes in this PR: **NO**

<!--
#### New package
- This new package conforms to the [package requirements](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#package-requirements): **YES**|**NO**
-->

<!-- Note: If the build is likely to take more than 2 hours, please add ci skip tag as described in
https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->

#### Local build testing
- I built this PR locally for my native architecture, (x86_64-glibc)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - x86_64-musl
  - armv7l



A patch file from https://github.com/void-linux/void-packages/pull/41254.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-update_libksba-41254.patch --]
[-- Type: text/x-diff, Size: 1140 bytes --]

From 35857151bfcc7f3d294860bbd5270770485d131d Mon Sep 17 00:00:00 2001
From: Albert Schwarzkopf <dev-voidlinux@quitesimple.org>
Date: Fri, 23 Dec 2022 09:33:02 +0100
Subject: [PATCH] libksba: update to 1.6.3.

---
 srcpkgs/libksba/template | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/srcpkgs/libksba/template b/srcpkgs/libksba/template
index adc6202164c1..33af6e3ca032 100644
--- a/srcpkgs/libksba/template
+++ b/srcpkgs/libksba/template
@@ -1,6 +1,6 @@
 # Template file for 'libksba'
 pkgname=libksba
-version=1.6.0
+version=1.6.3
 revision=1
 build_style=gnu-configure
 makedepends="libgpg-error-devel"
@@ -9,7 +9,7 @@ maintainer="Orphaned <orphan@voidlinux.org>"
 license="GPL-2.0-or-later,LGPL-3.0-or-later"
 homepage="https://www.gnupg.org/related_software/libksba/index.html"
 distfiles="https://gnupg.org/ftp/gcrypt/${pkgname}/${pkgname}-${version}.tar.bz2"
-checksum=dad683e6f2d915d880aa4bed5cea9a115690b8935b78a1bbe01669189307a48b
+checksum=3f72c68db30971ebbf14367527719423f0a4d5f8103fc9f4a1c01a9fa440de5c
 
 libksba-devel_package() {
 	depends="libgpg-error-devel ${sourcepkg}>=${version}_${revision}"

Re: [PR REVIEW] libksba: update to 1.6.3. CVE-2022-47629

[paper42]

[-- Attachment #1: Type: text/plain, Size: 243 bytes --]

New review comment by paper42 on void-packages repository

https://github.com/void-linux/void-packages/pull/41254#discussion_r1056237565

Comment:
```suggestion
distfiles="https://gnupg.org/ftp/gcrypt/libksba/libksba-${version}.tar.bz2"
```

Re: libksba: update to 1.6.3. CVE-2022-47629

[jcgruenhage]

[-- Attachment #1: Type: text/plain, Size: 375 bytes --]

New comment by jcgruenhage on void-packages repository

https://github.com/void-linux/void-packages/pull/41254#issuecomment-1365449132

Comment:
The changes from here are included in #41270, which also includes the change suggested by @paper42 above, and other related updates, as well as my adoption of the package, so I'd suggest that we close this one in favor of #41270 

Re: [PR PATCH] [Closed]: libksba: update to 1.6.3. CVE-2022-47629

[crtxcr]

[-- Attachment #1: Type: text/plain, Size: 994 bytes --]

There's a closed pull request on the void-packages repository

libksba: update to 1.6.3. CVE-2022-47629
https://github.com/void-linux/void-packages/pull/41254

Description:
#### Testing the changes
- I tested the changes in this PR: **NO**

<!--
#### New package
- This new package conforms to the [package requirements](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#package-requirements): **YES**|**NO**
-->

<!-- Note: If the build is likely to take more than 2 hours, please add ci skip tag as described in
https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->

#### Local build testing
- I built this PR locally for my native architecture, (x86_64-glibc)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - x86_64-musl
  - armv7l