From 87351cd06c89d8cab48bdcceddb469fc63e74ef0615871ec83a0c020487d5546 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Fri, 4 May 2018 14:24:16 +0000 Subject: [PATCH] Accepting request 604047 from security:privacy GnuPG 2.2.7 OBS-URL: https://build.opensuse.org/request/show/604047 OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=196 --- gnupg-2.2.6.tar.bz2 | 3 --- gnupg-2.2.6.tar.bz2.sig | Bin 620 -> 0 bytes gnupg-2.2.7.tar.bz2 | 3 +++ gnupg-2.2.7.tar.bz2.sig | Bin 0 -> 310 bytes gnupg-add_legacy_FIPS_mode_option.patch | 22 +++++++++++----------- gpg2.changes | 22 ++++++++++++++++++++++ gpg2.spec | 2 +- 7 files changed, 37 insertions(+), 15 deletions(-) delete mode 100644 gnupg-2.2.6.tar.bz2 delete mode 100644 gnupg-2.2.6.tar.bz2.sig create mode 100644 gnupg-2.2.7.tar.bz2 create mode 100644 gnupg-2.2.7.tar.bz2.sig diff --git a/gnupg-2.2.6.tar.bz2 b/gnupg-2.2.6.tar.bz2 deleted file mode 100644 index 4f13a70..0000000 --- a/gnupg-2.2.6.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e64d8c5fa2d05938a5080cb784a98ac21be0812f2a26f844b18f0d6a0e711984 -size 6605028 diff --git a/gnupg-2.2.6.tar.bz2.sig b/gnupg-2.2.6.tar.bz2.sig deleted file mode 100644 index acda3dac5a5fc1558c6454b811e03914d22974e667567ddbeef8acdf1205d5a4..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 620 zcmV-y0+aoT0W$;u0SEvc79j-KX(1!T23_i24?49Zn>o@?CF8aQ0$R(-cK`|r5G0#9 z(oZGhwyN|8|7D=X7TitpC|Bw5C6|-ExW)_D1Em>761Ox^5SNqn0jT;#0o|2mB%^T! z3Y=xnZ^uSU9$F68vb=XiMJOT~3lH!%zCeuZ9##Kp?WcVcn66qnaV0Kip@F2mIeWc? z2A#Bn*!LiT;kpVNvceyZukQe+DLsSr)zums4N5LdyPcN@&`!urKd-Xv*z5u~t}i7r zqU`WuO-Hjm-iM_kc&C8p`4@T%m?jsl@KB0L<8iQewl#4~ZA9o&3Y?nChT3)CHpps( z>SHH=I_i;)yCN=4#I#JpBff(&!{yLiD+ZlPcD z7TM7Q0Eq!J1ONdD038+~1OpzzQ*Kxdj-rOC@*r`riZi`G1_c6I%ja1D3JDM(aj=Rr zy*~zn{RjYv^<6pmrvWS=hI;Apq!t9gky<$jzkFdQcX4Z6rie{eboKGt%~yMzyJw`Z z>6c|5vw)8G{B}B$S>V6gA}!a$Un#gMD?P(+;XI7k0zZal>8W^;W07_qaGO2ZBl~t- zG%>vpXeB`P7}24M?rcSIz#Uvj GFL)?r+93D< diff --git a/gnupg-2.2.7.tar.bz2 b/gnupg-2.2.7.tar.bz2 new file mode 100644 index 0000000..7cc2cef --- /dev/null +++ b/gnupg-2.2.7.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d95b361ee6ef7eff86af40c8c72bf9313736ac9f7010d6604d78bf83818e976e +size 6631100 diff --git a/gnupg-2.2.7.tar.bz2.sig b/gnupg-2.2.7.tar.bz2.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..7e4ca39b0d8d3cc6e052543c65cdbb1831457ca07f27af78bf218f867b695933 GIT binary patch literal 310 zcmV-60m=S}0W$;u0SEvc79j-KX(1!T23_i24?49Zn>o@?CF8aQ0$S=AJpc*`5G0#9 z(oZGhw*SNk0Gh84=Q>A2n*Sozj_twIc3N4wRDXN5)?jE~T}wJSS_a^&iBS7}EB*}m zPQ(?F+b?c@goR&%aS^j+f!wyW2wVMU8cbI8wa6h$y6+~LmTXk=hW~1VxY13kAn`RO zwU9jQrsJQ^u?*yOe%1DsS0xkb8xl#cyPw3x%ubHK2B=d|0KsQD+F0<3tz2*sPdy^1x&@#<=_MM9%E2QXE+Y=V_Y!)aR2`zyxEpu#>%kyy5#dorJFa7ms5B$ zKrBpR+hztPCbpBPrywEf($g!H1lUN1Kr@6JRfXgaeyUMm8<)dRsb>1niA9m1PekXd I^lPMxw2zOIjsO4v literal 0 HcmV?d00001 diff --git a/gnupg-add_legacy_FIPS_mode_option.patch b/gnupg-add_legacy_FIPS_mode_option.patch index 56d9841..0a89bec 100644 --- a/gnupg-add_legacy_FIPS_mode_option.patch +++ b/gnupg-add_legacy_FIPS_mode_option.patch @@ -3,11 +3,11 @@ g10/gpg.c | 9 +++++++++ 2 files changed, 27 insertions(+) -Index: gnupg-2.2.6/doc/gpg.texi +Index: gnupg-2.2.7/doc/gpg.texi =================================================================== ---- gnupg-2.2.6.orig/doc/gpg.texi 2018-04-10 09:05:55.807324463 +0200 -+++ gnupg-2.2.6/doc/gpg.texi 2018-04-10 09:05:58.627349563 +0200 -@@ -2094,6 +2094,24 @@ implies, this option is for experts only +--- gnupg-2.2.7.orig/doc/gpg.texi 2018-05-04 16:14:30.949580264 +0200 ++++ gnupg-2.2.7/doc/gpg.texi 2018-05-04 16:14:34.025609243 +0200 +@@ -2097,6 +2097,24 @@ implies, this option is for experts only understand the implications of what it allows you to do, leave this off. @option{--no-expert} disables this option. @@ -32,19 +32,19 @@ Index: gnupg-2.2.6/doc/gpg.texi @end table -Index: gnupg-2.2.6/g10/gpg.c +Index: gnupg-2.2.7/g10/gpg.c =================================================================== ---- gnupg-2.2.6.orig/g10/gpg.c 2018-04-10 09:05:55.807324463 +0200 -+++ gnupg-2.2.6/g10/gpg.c 2018-04-10 09:06:21.583553887 +0200 -@@ -424,6 +424,7 @@ enum cmd_and_opt_values - oSender, +--- gnupg-2.2.7.orig/g10/gpg.c 2018-05-04 16:14:30.949580264 +0200 ++++ gnupg-2.2.7/g10/gpg.c 2018-05-04 16:15:00.441858109 +0200 +@@ -425,6 +425,7 @@ enum cmd_and_opt_values oKeyOrigin, oRequestOrigin, + oNoSymkeyCache, + oSetLegacyFips, oNoop }; -@@ -871,6 +872,7 @@ static ARGPARSE_OPTS opts[] = { +@@ -872,6 +873,7 @@ static ARGPARSE_OPTS opts[] = { ARGPARSE_s_n (oAllowMultipleMessages, "allow-multiple-messages", "@"), ARGPARSE_s_n (oNoAllowMultipleMessages, "no-allow-multiple-messages", "@"), ARGPARSE_s_n (oAllowWeakDigestAlgos, "allow-weak-digest-algos", "@"), @@ -52,7 +52,7 @@ Index: gnupg-2.2.6/g10/gpg.c ARGPARSE_s_s (oDefaultNewKeyAlgo, "default-new-key-algo", "@"), -@@ -3565,6 +3567,13 @@ main (int argc, char **argv) +@@ -3568,6 +3570,13 @@ main (int argc, char **argv) opt.def_new_key_algo = pargs.r.ret_str; break; diff --git a/gpg2.changes b/gpg2.changes index 52aaa26..fbec722 100644 --- a/gpg2.changes +++ b/gpg2.changes @@ -1,3 +1,25 @@ +------------------------------------------------------------------- +Fri May 4 14:15:27 UTC 2018 - astieger@suse.com + +- GnuPG 2.2.7: + * gpg: New option --no-symkey-cache to disable the passphrase + cache for symmetrical en- and decryption. + * gpg: The ERRSIG status now prints the fingerprint if that is + part of the signature + * gpg: Relax emitting of FAILURE status lines + * gpg: Add a status flag to "sig" lines printed with --list-sigs + * gpg: Fix "Too many open files" when using --multifile + * ssh: Return an error for unknown ssh-agent flags + * dirmngr: Fix a CNAME problem with pools and TLS. Also use a + fixed mapping of keys.gnupg.net to sks-keyservers.net + * dirmngr: Try resurrecting dead hosts earlier (from 3h to 1.5h) + * dirmngr: Fallback to CRL if no default OCSP responder is + configured + * dirmngr: Implement CRL fetching via https. Here a redirection + to http is explictly allowed + * agent,dirmngr: New sub-command "getenv" for "getinfo" to ease + debugging + ------------------------------------------------------------------- Tue Apr 10 06:32:22 UTC 2018 - kbabioch@suse.com diff --git a/gpg2.spec b/gpg2.spec index 68043ee..25aeb85 100644 --- a/gpg2.spec +++ b/gpg2.spec @@ -17,7 +17,7 @@ Name: gpg2 -Version: 2.2.6 +Version: 2.2.7 Release: 0 Summary: File encryption, decryption, signature creation and verification utility License: GPL-3.0+