Accepting request 616617 from home:AndreasStieger:branches:devel:languages:python

python-gnupg 0.4.3 CVE-2018-12020 boo#1096745

OBS-URL: https://build.opensuse.org/request/show/616617
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-gnupg?expand=0&rev=6

python-gnupg-0.4.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ef47b02eaf41dee3cf4b02ddf83130827318de9fe3eae89d01a3f05859e20e1a
-size 44534

python-gnupg-0.4.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2d158dfc6b54927752b945ebe57e6a0c45da27747fa3b9ae66eccc0d2147ac0d
+size 46958

python-python-gnupg.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Jun 13 19:37:41 UTC 2018 - astieger@suse.com
+
+- uppate to 0.4.3:
+  * Add --no-verbose to the gpg command line, in case verbose is
+    specified is gpg.conf.
+  * This is mitigation against CVE-2018-12020 boo#1096745
+- includes changes from 0.4.2:
+  * Subkey information is now collected and returned in a
+    subkey_info dictionary keyed by the subkey's ID
+  * Add expect_passphrase password for use on GnuPG >= 2.1 when
+    passing passphrase to gpg via pinentry
+  * Provid a trust_keys method to allow setting the trust level
+    for keys
+  * When the gpg executable is not found, note the path used in the
+    exception message
+  * Make error messages nor informational
+
 -------------------------------------------------------------------
 Mon Sep 11 15:33:08 UTC 2017 - jengelh@inai.de
 

python-python-gnupg.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-python-gnupg
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,21 +20,22 @@
 %define         oldpython python
 %bcond_with     test
 Name:           python-python-gnupg
-Version:        0.4.1
+Version:        0.4.3
 Release:        0
 Summary:        A wrapper for the GNU Privacy Guard (GPG or GnuPG)
 License:        BSD-3-Clause
 Group:          Development/Languages/Python
-Url:            http://pythonhosted.org/python-gnupg/index.html
+URL:            http://pythonhosted.org/python-gnupg/index.html
 Source:         https://files.pythonhosted.org/packages/source/p/python-gnupg/python-gnupg-%{version}.tar.gz
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
+Requires:       gpg2
+BuildArch:      noarch
 %if %{with test}
 BuildRequires:  gpg2
 %endif
-Requires:       gpg2
 %ifpython2
 Obsoletes:      %{oldpython}-gnupg < %{version}
 Provides:       %{oldpython}-gnupg = %{version}
@@ -43,8 +44,6 @@ Provides:       %{oldpython}-gnupg = %{version}
 Obsoletes:      python3-gnupg < %{version}
 Provides:       python3-gnupg = %{version}
 %endif
-BuildArch:      noarch
-
 %python_subpackages
 
 %description
@@ -67,8 +66,8 @@ encryption and signature functionality from Python programs.
 %endif
 
 %files %{python_files}
-%defattr(-,root,root,-)
+%license LICENSE.txt
-%doc LICENSE.txt README.rst
+%doc README.rst
 %{python_sitelib}/*
 
 %changelog