Accepting request 604049 from Base:System

OBS-URL: https://build.opensuse.org/request/show/604049
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gpg2?expand=0&rev=127

gnupg-2.2.6.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e64d8c5fa2d05938a5080cb784a98ac21be0812f2a26f844b18f0d6a0e711984
-size 6605028

gnupg-2.2.7.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d95b361ee6ef7eff86af40c8c72bf9313736ac9f7010d6604d78bf83818e976e
+size 6631100

gnupg-add_legacy_FIPS_mode_option.patch

@@ -3,11 +3,11 @@
  g10/gpg.c    |    9 +++++++++
  2 files changed, 27 insertions(+)
 
-Index: gnupg-2.2.6/doc/gpg.texi
+Index: gnupg-2.2.7/doc/gpg.texi
 ===================================================================
---- gnupg-2.2.6.orig/doc/gpg.texi	2018-04-10 09:05:55.807324463 +0200
+--- gnupg-2.2.7.orig/doc/gpg.texi	2018-05-04 16:14:30.949580264 +0200
-+++ gnupg-2.2.6/doc/gpg.texi	2018-04-10 09:05:58.627349563 +0200
++++ gnupg-2.2.7/doc/gpg.texi	2018-05-04 16:14:34.025609243 +0200
-@@ -2094,6 +2094,24 @@ implies, this option is for experts only
+@@ -2097,6 +2097,24 @@ implies, this option is for experts only
  understand the implications of what it allows you to do, leave this
  off. @option{--no-expert} disables this option.
  
@@ -32,19 +32,19 @@ Index: gnupg-2.2.6/doc/gpg.texi
  @end table
  
  
-Index: gnupg-2.2.6/g10/gpg.c
+Index: gnupg-2.2.7/g10/gpg.c
 ===================================================================
---- gnupg-2.2.6.orig/g10/gpg.c	2018-04-10 09:05:55.807324463 +0200
+--- gnupg-2.2.7.orig/g10/gpg.c	2018-05-04 16:14:30.949580264 +0200
-+++ gnupg-2.2.6/g10/gpg.c	2018-04-10 09:06:21.583553887 +0200
++++ gnupg-2.2.7/g10/gpg.c	2018-05-04 16:15:00.441858109 +0200
-@@ -424,6 +424,7 @@ enum cmd_and_opt_values
+@@ -425,6 +425,7 @@ enum cmd_and_opt_values
-     oSender,
      oKeyOrigin,
      oRequestOrigin,
+     oNoSymkeyCache,
 +    oSetLegacyFips,
  
      oNoop
    };
-@@ -871,6 +872,7 @@ static ARGPARSE_OPTS opts[] = {
+@@ -872,6 +873,7 @@ static ARGPARSE_OPTS opts[] = {
    ARGPARSE_s_n (oAllowMultipleMessages,      "allow-multiple-messages", "@"),
    ARGPARSE_s_n (oNoAllowMultipleMessages, "no-allow-multiple-messages", "@"),
    ARGPARSE_s_n (oAllowWeakDigestAlgos, "allow-weak-digest-algos", "@"),
@@ -52,7 +52,7 @@ Index: gnupg-2.2.6/g10/gpg.c
  
    ARGPARSE_s_s (oDefaultNewKeyAlgo, "default-new-key-algo", "@"),
  
-@@ -3565,6 +3567,13 @@ main (int argc, char **argv)
+@@ -3568,6 +3570,13 @@ main (int argc, char **argv)
              opt.def_new_key_algo = pargs.r.ret_str;
              break;
  

gpg2.changes

@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Fri May  4 14:15:27 UTC 2018 - astieger@suse.com
+
+- GnuPG 2.2.7:
+  * gpg: New option --no-symkey-cache to disable the passphrase
+    cache for symmetrical en- and decryption.
+  * gpg: The ERRSIG status now prints the fingerprint if that is
+    part of the signature
+  * gpg: Relax emitting of FAILURE status lines
+  * gpg: Add a status flag to "sig" lines printed with --list-sigs
+  * gpg: Fix "Too many open files" when using --multifile
+  * ssh: Return an error for unknown ssh-agent flags
+  * dirmngr: Fix a CNAME problem with pools and TLS.  Also use a
+    fixed mapping of keys.gnupg.net to sks-keyservers.net
+  * dirmngr: Try resurrecting dead hosts earlier (from 3h to 1.5h)
+  * dirmngr: Fallback to CRL if no default OCSP responder is
+    configured
+  * dirmngr: Implement CRL fetching via https.  Here a redirection
+    to http is explictly allowed
+  * agent,dirmngr: New sub-command "getenv" for "getinfo" to ease
+    debugging
+
 -------------------------------------------------------------------
 Tue Apr 10 06:32:22 UTC 2018 - kbabioch@suse.com
 

gpg2.spec

@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.2.6
+Version:        2.2.7
 Release:        0
 Summary:        File encryption, decryption, signature creation and verification utility
 License:        GPL-3.0+