[pkgsrc/pkgsrc-2021Q4]: pkgsrc/security/pear-Crypt_GPG Pullup ticket #6590 - ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/f5dc11fda012
branches:  pkgsrc-2021Q4
changeset: 374937:f5dc11fda012
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Thu Mar 03 19:15:19 2022 +0000

description:
Pullup ticket #6590 - requested by taca
security/pear-Crypt_GPG: security fix (CVE-2022-24953)

Revisions pulled up:
- security/pear-Crypt_GPG/Makefile                              1.11
- security/pear-Crypt_GPG/distinfo                              1.12
- security/pear-Crypt_GPG/patches/patch-.._package.xml          1.10

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Feb 20 13:15:15 UTC 2022

   Modified Files:
        pkgsrc/security/pear-Crypt_GPG: Makefile distinfo
        pkgsrc/security/pear-Crypt_GPG/patches: patch-.._package.xml

   Log Message:
   security/pear-Crypt_GPG: update to 1.6.7

   1.6.7 (2022-02-16)

   * [CVE-2022-24953] Insert the end-of-options marker before operation
     arguments [thomas-chauchefoin-sonarsource].

   * Ignore tests/debug.log and .gitattributes itself.

diffstat:

 security/pear-Crypt_GPG/Makefile                     |   4 ++--
 security/pear-Crypt_GPG/distinfo                     |  10 +++++-----
 security/pear-Crypt_GPG/patches/patch-.._package.xml |   8 ++++----
 3 files changed, 11 insertions(+), 11 deletions(-)

diffs (46 lines):

diff -r 6c9274381ee5 -r f5dc11fda012 security/pear-Crypt_GPG/Makefile
--- a/security/pear-Crypt_GPG/Makefile  Thu Mar 03 19:11:58 2022 +0000
+++ b/security/pear-Crypt_GPG/Makefile  Thu Mar 03 19:15:19 2022 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.10 2021/09/06 15:08:44 taca Exp $
+# $NetBSD: Makefile,v 1.10.4.1 2022/03/03 19:15:19 bsiegert Exp $
 
-DISTNAME=      Crypt_GPG-1.6.6
+DISTNAME=      Crypt_GPG-1.6.7
 CATEGORIES=    security
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
diff -r 6c9274381ee5 -r f5dc11fda012 security/pear-Crypt_GPG/distinfo
--- a/security/pear-Crypt_GPG/distinfo  Thu Mar 03 19:11:58 2022 +0000
+++ b/security/pear-Crypt_GPG/distinfo  Thu Mar 03 19:15:19 2022 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.11 2021/10/26 11:17:36 nia Exp $
+$NetBSD: distinfo,v 1.11.2.1 2022/03/03 19:15:19 bsiegert Exp $
 
-BLAKE2s (pear/Crypt_GPG-1.6.6.tgz) = bdbeb60ac9b78893630408f5f3a7b5035854242808efb38fe4c62c74201e612a
-SHA512 (pear/Crypt_GPG-1.6.6.tgz) = 38f721cf818972f835162b9e405efb55160276d759361e1f351645d585695f903445accf83f190f7f14f202e2bebe3c78b7ff2b8af2151c3d66bd6636f98859a
-Size (pear/Crypt_GPG-1.6.6.tgz) = 343929 bytes
-SHA1 (patch-.._package.xml) = de12674a363583df88199d8c84d2c244bd78b0c8
+BLAKE2s (pear/Crypt_GPG-1.6.7.tgz) = 9e02d7c2a26bd93b82c2238d6b315495da0f72b34603a85547f6c1d137338243
+SHA512 (pear/Crypt_GPG-1.6.7.tgz) = dd629271ebbcb98df5d31313c1a6911b62964046c758e00b55377170653e9880d2edc7d0b953fd6ae441d74238c4a8e1008bf6a9195a19ff463bcc82665f14e8
+Size (pear/Crypt_GPG-1.6.7.tgz) = 343957 bytes
+SHA1 (patch-.._package.xml) = 7562a9d60ab9a96d102c0ded4c249c4f5927898c
diff -r 6c9274381ee5 -r f5dc11fda012 security/pear-Crypt_GPG/patches/patch-.._package.xml
--- a/security/pear-Crypt_GPG/patches/patch-.._package.xml      Thu Mar 03 19:11:58 2022 +0000
+++ b/security/pear-Crypt_GPG/patches/patch-.._package.xml      Thu Mar 03 19:15:19 2022 +0000
@@ -1,11 +1,11 @@
-$NetBSD: patch-.._package.xml,v 1.9 2021/09/06 15:08:44 taca Exp $
+$NetBSD: patch-.._package.xml,v 1.9.4.1 2022/03/03 19:15:19 bsiegert Exp $
 
 * Drop MD5 for replacing shbang line.
 
---- ../package.xml.orig        2021-09-05 08:36:03.000000000 +0000
+--- ../package.xml.orig        2022-02-16 17:41:21.000000000 +0000
 +++ ../package.xml
-@@ -65,7 +65,7 @@ Support generating keys without a user n
-    <file baseinstalldir="/" md5sum="67316b5765933f240787d7d8877cf228" name="data/pinentry-cli.xml" role="data">
+@@ -64,7 +64,7 @@ Ignore tests/debug.log and .gitattribute
+    <file baseinstalldir="/" md5sum="8fb0283a2cc4f1b5f97df1b9f57ab7e8" name="data/pinentry-cli.xml" role="data">
      <tasks:replace from="@package-version@" to="version" type="package-info" />
     </file>
 -   <file baseinstalldir="/" md5sum="069d671c63366eaf64b050132dd76da3" name="scripts/crypt-gpg-pinentry" role="script">