Accepting request 337605 from security:privacy

GnuPG 2.1.9

OBS-URL: https://build.opensuse.org/request/show/337605
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=118

gnupg-2.1.8.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a3b8d01e4690715d42e8f289493c85413766f3fa935e4fe7e5ff5b0f6e2781a3
-size 4900705

gnupg-2.1.9.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1cb7633a57190beb66f9249cb7446603229b273d4d89331b75c652fa4a29f7b6
+size 4925167

gnupg-add_legacy_FIPS_mode_option.patch

@@ -3,11 +3,11 @@
  g10/gpg.c    |    9 +++++++++
  2 files changed, 27 insertions(+)
 
-Index: gnupg-2.1.3/doc/gpg.texi
+Index: gnupg-2.1.9/doc/gpg.texi
 ===================================================================
---- gnupg-2.1.3.orig/doc/gpg.texi	2015-04-11 20:48:01.000000000 +0200
-+++ gnupg-2.1.3/doc/gpg.texi	2015-04-11 20:48:22.000000000 +0200
-@@ -1857,6 +1857,24 @@ implies, this option is for experts only
+--- gnupg-2.1.9.orig/doc/gpg.texi
++++ gnupg-2.1.9/doc/gpg.texi
+@@ -1778,6 +1778,24 @@ implies, this option is for experts only
  understand the implications of what it allows you to do, leave this
  off. @option{--no-expert} disables this option.
  
@@ -32,19 +32,19 @@ Index: gnupg-2.1.3/doc/gpg.texi
  @end table
  
  
-Index: gnupg-2.1.3/g10/gpg.c
+Index: gnupg-2.1.9/g10/gpg.c
 ===================================================================
---- gnupg-2.1.3.orig/g10/gpg.c	2015-04-11 20:48:01.000000000 +0200
-+++ gnupg-2.1.3/g10/gpg.c	2015-04-11 20:48:48.000000000 +0200
-@@ -385,6 +385,7 @@ enum cmd_and_opt_values
-     oFakedSystemTime,
+--- gnupg-2.1.9.orig/g10/gpg.c
++++ gnupg-2.1.9/g10/gpg.c
+@@ -386,6 +386,7 @@ enum cmd_and_opt_values
      oNoAutostart,
      oPrintPKARecords,
+     oPrintDANERecords,
 +    oSetLegacyFips,
  
      oNoop
    };
-@@ -777,6 +778,7 @@ static ARGPARSE_OPTS opts[] = {
+@@ -780,6 +781,7 @@ static ARGPARSE_OPTS opts[] = {
    ARGPARSE_s_n (oAllowMultipleMessages,      "allow-multiple-messages", "@"),
    ARGPARSE_s_n (oNoAllowMultipleMessages, "no-allow-multiple-messages", "@"),
    ARGPARSE_s_n (oAllowWeakDigestAlgos, "allow-weak-digest-algos", "@"),
@@ -52,7 +52,7 @@ Index: gnupg-2.1.3/g10/gpg.c
  
    /* These two are aliases to help users of the PGP command line
       product use gpg with minimal pain.  Many commands are common
-@@ -3170,6 +3172,13 @@ main (int argc, char **argv)
+@@ -3188,6 +3190,13 @@ main (int argc, char **argv)
  
            case oNoAutostart: opt.autostart = 0; break;
  

gpg2.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Sat Oct 10 11:39:55 UTC 2015 - astieger@suse.com
+
+- GnuPG 2.1.9:
+ * gpg: Allow fetching keys via OpenPGP DANE (--auto-key-locate).\
+   New option --print-dane-records.
+ * gpg: Fix for a problem with PGP-2 keys in a keyring.
+ * gpg: Fail with an error instead of a warning if a modern cipher
+   algorithm is used without a MDC.
+ * agent: New option --pinentry-invisible-char.
+ * agent: Always do a RSA signature verification after creation.
+ * agent: Fix a regression in ssh-add-ing Ed25519 keys.
+ * agent: Fix ssh fingerprint computation for nistp384 and EdDSA.
+ * agent: Fix crash during passprase entry on some platforms.
+ * scd: Change timeout to fix problems with some 2.1 cards.
+ * dirmngr: Displayed name is now Key Acquirer.
+ * dirmngr: Add option --keyserver.  Deprecate that option for gpg.
+   Install a dirmngr.conf file from a skeleton for new installations.
+- update gnupg-add_legacy_FIPS_mode_option.patch for context change
+
 -------------------------------------------------------------------
 Fri Sep 11 06:02:23 UTC 2015 - astieger@suse.com
 

gpg2.spec

@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.1.8
+Version:        2.1.9
 Release:        0
 Summary:        GnuPG 2
 License:        GPL-3.0+