CVS commit: pkgsrc/security/gnupg

["Tim Zingelman" <tez%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tez
Date:           Fri Jun 15 21:51:23 UTC 2018

Modified Files:
        pkgsrc/security/gnupg: Makefile distinfo

Log Message:
gnupg: update to 1.4.23

Fixes CVE-2017-7526

Updates since 1.4.22:

2018-06-11  Werner Koch  <wk%gnupg.org@localhost>

        Release 1.4.23.
        + commit 8ae6a246bef5b5eb0684e9fb1c933a4f8441dadd

2018-06-08  Werner Koch  <wk%gnupg.org@localhost>

        gpg: Sanitize diagnostic with the original file name.
        + commit 2326851c60793653069494379b16d84e4c10a0ac
        * g10/mainproc.c (proc_plaintext): Sanitize verbose output.

2018-04-13  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Push compress filter only if compressed.
        + commit 0f8fd95ab32a6d29dac79e19f0850037c7d0c16f
        * g10/compress.c (handle_compressed): Fix memory leak.

2017-12-18  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        po: Update Japanese translation.
        + commit 1338bce5f66a95b53f18c4b54f0e9ac79604500a
        * po/ja.po: Fix message with no "%s".

2017-12-04  NIIBE Yutaka  <gniibe%fsij.org@localhost>
            Damien Goutte-Gattat  <dgouttegattat%incenp.org@localhost>

        g10: Fix regexp sanitization.
        + commit 9441946e1824eb58249c58432ed1f554d0d8a102
        * g10/trustdb.c (sanitize_regexp): Only escape operators.

2017-11-10  Dario Niedermann  <dario%darioniedermann.it@localhost>

        Do not use C99 feature.
        + commit 877e3073d731fec55a88673f91ed646a75e786c8
        * cipher/rsa.c (secret): Move var decl to the beginning.

2017-09-06  Frans Spiesschaert  <Frans.Spiesschaert%yucom.be@localhost>

        po: update Dutch translation.
        + commit aa26eda8ab679a80a7be2c82478cb4440b45ec8c

2017-08-04  Marcus Brinkmann  <marcus.brinkmann%ruhr-uni-bochum.de@localhost>

        doc: Remove documentation for future option --faked-system-time.
        + commit eb15d5ed8e4a765998e9de7698bdc65328bcaaa3
        doc/gpg.texi: Remove documentation for --faked-system-time.

2017-08-02  Daniel Kahn Gillmor  <dkg%fifthhorseman.net@localhost>

        debian: Remove packaging from upstream repository.
        + commit 9832a4bacfa5232534f2c7fe7655bd0677a41f6e
        Debian packaging for GnuPG is handled in debian git repositories, and
        doesn't belong here in the upstream repository.  The packaging was
        significantly out of date anyway.

        If you're looking for debian packaging for the 1.4 branch of GnuPG,
        please use the following git remote:

            https://anonscm.debian.org/git/pkg-gnupg/gnupg1.git

2017-08-02  Joe Hansen  <joedalton2%yahoo.dk@localhost>

        po: Update Danish translation.
        + commit 12afc37a946477692257d725acac513f271c4e9e
        Originally reported at:
        http://lists.gnupg.org/pipermail/gnupg-i18n/2014-November/000308.html

2017-08-02  Frans Spiesschaert  <Frans.Spiesschaert%yucom.be@localhost>

        po: Update Dutch translation.
        + commit 6d5c5204d79fa9d01981c0076d3acde18534640a
        Debian-Bug-Id: 845695

2017-08-01  Manuel Venturi Porras Peralta  <venturi%openmailbox.org@localhost>

        po: Update Spanish translation.
        + commit 76239356bcb3bfeec5327637ed87429594868fef
        Debian-Bug-Id: 814541


To generate a diff of this commit:
cvs rdiff -u -r1.144 -r1.145 pkgsrc/security/gnupg/Makefile
cvs rdiff -u -r1.71 -r1.72 pkgsrc/security/gnupg/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnupg/Makefile
diff -u pkgsrc/security/gnupg/Makefile:1.144 pkgsrc/security/gnupg/Makefile:1.145
--- pkgsrc/security/gnupg/Makefile:1.144        Sun Apr 29 21:32:02 2018
+++ pkgsrc/security/gnupg/Makefile      Fri Jun 15 21:51:23 2018
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.144 2018/04/29 21:32:02 adam Exp $
+# $NetBSD: Makefile,v 1.145 2018/06/15 21:51:23 tez Exp $
 
-DISTNAME=      gnupg-1.4.22
-PKGREVISION=   3
+DISTNAME=      gnupg-1.4.23
 CATEGORIES=    security
 MASTER_SITES=  ftp://ftp.gnupg.org/gcrypt/gnupg/
 MASTER_SITES+= ftp://ftp.ring.gr.jp/pub/net/gnupg/gnupg/

Index: pkgsrc/security/gnupg/distinfo
diff -u pkgsrc/security/gnupg/distinfo:1.71 pkgsrc/security/gnupg/distinfo:1.72
--- pkgsrc/security/gnupg/distinfo:1.71 Mon Aug 14 20:12:00 2017
+++ pkgsrc/security/gnupg/distinfo      Fri Jun 15 21:51:23 2018
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.71 2017/08/14 20:12:00 wiz Exp $
+$NetBSD: distinfo,v 1.72 2018/06/15 21:51:23 tez Exp $
 
-SHA1 (gnupg-1.4.22.tar.bz2) = 4bad84fba712626cbbd5adf20988788028c5a5a6
-RMD160 (gnupg-1.4.22.tar.bz2) = 570106363beacbb2bb514dcf869aa335c292dffd
-SHA512 (gnupg-1.4.22.tar.bz2) = c03acac0fa55761470bb085d78a44e2b99ebb187e8396cbb031a184b1e40bef2a40c91da07755d1a20610a3daa6aa1eefea2d12a0dbd5a79a45466166419c708
-Size (gnupg-1.4.22.tar.bz2) = 3746546 bytes
+SHA1 (gnupg-1.4.23.tar.bz2) = 13747486ed5ff707f796f34f50f4c3085c3a6875
+RMD160 (gnupg-1.4.23.tar.bz2) = 087c494ff78bd1e85873ac383e0c6e236b6a9869
+SHA512 (gnupg-1.4.23.tar.bz2) = 78dc52a2010202a4afc8814b29fda657a6c9fe230d5e7db11ae040edd2b0ca819e1baa4dbd6c0d04d36cd353df484e83f52d17759d2891c2cf7025c0b5d36612
+Size (gnupg-1.4.23.tar.bz2) = 3749353 bytes
 SHA1 (patch-ab) = 24e200a04f8f31e53e22dc80ed079570cb5de8d8