Accepting request 238555 from home:AndreasStieger:branches:Base:System

GnuPG 2.0.24 [bnc#884130] [CVE-2014-4617]

OBS-URL: https://build.opensuse.org/request/show/238555
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=73

gnupg-2.0.23.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cf196b8056eafb4236f000a3e12543e0022a1fec4d6edff1b91b48936c109841
-size 4297195

gnupg-2.0.24.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d974a1d86c9470571411346368416d96200ef9510028763c1303cd66e3820232
+size 4301922

gpg2.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Tue Jun 24 22:25:12 UTC 2014 - andreas.stieger@gmx.de
+
+- update to 2.0.24
+  Contains a security fix to stop a possible DoS using garbled
+  compressed data packets which can be used to put gpg into an
+  infinite loop. [bnc#884130] [CVE-2014-4617]
+  * gpg: Avoid DoS due to garbled compressed data packets.
+- further:
+  * gpg: Screen keyserver responses to avoid importing unwanted
+    keys from rogue servers.
+  * gpg: The validity of user ids is now shown by default. To
+    revert this add "list-options no-show-uid-validity" to gpg.conf
+  * gpg: Print more specific reason codes with the INV_RECP status.
+  * gpg: Allow loading of a cert only key to an OpenPGP card.
+  * gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
+    1.6.
+
 -------------------------------------------------------------------
 Tue Jun  3 21:55:34 UTC 2014 - andreas.stieger@gmx.de
 

gpg2.keyring

@@ -7,7 +7,7 @@
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 <meta name="title" content="GnuPG - Signature Key"/>
 <meta name="generator" content="Org-mode"/>
-<meta name="generated" content="򳢛"/>
+<meta name="generated" content="򳢰"/>
 <meta name="author" content="Werner Koch"/>
 <meta name="description" content=""/>
 <meta name="keywords" content=""/>

gpg2.spec

@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.0.23
+Version:        2.0.24
 Release:        0
 BuildRequires:  automake >= 1.10
 BuildRequires:  expect