CVS commit: pkgsrc/security/gnupg2

["Jonathan Schleifer" <js%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   js
Date:           Sat Sep  5 10:25:52 UTC 2020

Modified Files:
        pkgsrc/security/gnupg2: Makefile PLIST distinfo

Log Message:
Update security/gnupg2 to 2.2.23

Fixes a criticial vulnerability: https://dev.gnupg.org/T5050

Noteworthy changes in version 2.2.22
====================================

  * gpg: Change the default key algorithm to rsa3072.

  * gpg: Add regular expression support for Trust Signatures on all
    platforms.  [#4843]

  * gpg: Fix regression in 2.2.21 with non-default --passphrase-repeat
    option.  [#4991]

  * gpg: Ignore --personal-digest-prefs for ECDSA keys.  [#5021]

  * gpgsm: Make rsaPSS a de-vs compliant scheme.

  * gpgsm: Show also the SHA256 fingerprint in key listings.

  * gpgsm: Do not require a default keyring for --gpgconf-list.  [#4867]

  * gpg-agent: Default to extended key format and record the creation
    time of keys.  Add new option --disable-extended-key-format.

  * gpg-agent: Support the WAYLAND_DISPLAY envvar.  [#5016]

  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist.  [#4866]

  * gpg-agent: Make the Pinentry work even if the envvar TERM is set
    to the empty string.  [#4137]

  * scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly
    incremented the error counter when using the "verify" command of
    "gpg --edit-key" with only the signature key being present.

  * dirmngr: Better handle systems with disabled IPv6.  [#4977]

  * gpgpslit: Install tool.  It was not installed in the past to avoid
    conflicts with the version installed by GnuPG 1.4.  [#5023]

  * gpgtar: Handle Unicode file names on Windows correctly (requires
    libgpg-error 1.39).  [#4083]

  * gpgtar: Make --files-from and --null work as documented.  [#5027]

  * Build the Windows installer with the new Ntbtls 0.2.0 so that TLS
    connections succeed for servers demanding GCM.

  Release-info: https://dev.gnupg.org/T5030

Noteworthy changes in version 2.2.23
====================================

  * gpg: Fix AEAD preference list overflow.  [#5050]

  * gpg: Fix a possible segv in the key cleaning code.

  * gpgsm: Fix a minor RFC2253 parser bug.  [#5037]

  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations.  Regression in 2.2.22.  [#5039]

  * po: Fix bug in the Hungarian translation.  Updates for the Czech,
    Polish, and Ukrainian translations.

  Release-info: https://dev.gnupg.org/T5045


To generate a diff of this commit:
cvs rdiff -u -r1.116 -r1.117 pkgsrc/security/gnupg2/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/gnupg2/PLIST
cvs rdiff -u -r1.62 -r1.63 pkgsrc/security/gnupg2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnupg2/Makefile
diff -u pkgsrc/security/gnupg2/Makefile:1.116 pkgsrc/security/gnupg2/Makefile:1.117
--- pkgsrc/security/gnupg2/Makefile:1.116       Tue Aug 18 09:39:23 2020
+++ pkgsrc/security/gnupg2/Makefile     Sat Sep  5 10:25:52 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.116 2020/08/18 09:39:23 schmonz Exp $
+# $NetBSD: Makefile,v 1.117 2020/09/05 10:25:52 js Exp $
 
-DISTNAME=      gnupg-2.2.21
+DISTNAME=      gnupg-2.2.23
 PKGNAME=       ${DISTNAME:S/gnupg-/gnupg2-/}
 CATEGORIES=    security
 MASTER_SITES=  ftp://ftp.gnupg.org/gcrypt/gnupg/

Index: pkgsrc/security/gnupg2/PLIST
diff -u pkgsrc/security/gnupg2/PLIST:1.9 pkgsrc/security/gnupg2/PLIST:1.10
--- pkgsrc/security/gnupg2/PLIST:1.9    Wed Nov  7 11:59:08 2018
+++ pkgsrc/security/gnupg2/PLIST        Sat Sep  5 10:25:52 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2018/11/07 11:59:08 adam Exp $
+@comment $NetBSD: PLIST,v 1.10 2020/09/05 10:25:52 js Exp $
 bin/dirmngr
 bin/dirmngr-client
 bin/g13
@@ -10,6 +10,7 @@ bin/gpgconf
 bin/gpgparsemail
 bin/gpgscm
 bin/gpgsm
+bin/gpgsplit
 bin/gpgtar
 bin/gpgv2
 bin/kbxutil

Index: pkgsrc/security/gnupg2/distinfo
diff -u pkgsrc/security/gnupg2/distinfo:1.62 pkgsrc/security/gnupg2/distinfo:1.63
--- pkgsrc/security/gnupg2/distinfo:1.62        Tue Aug 18 09:39:23 2020
+++ pkgsrc/security/gnupg2/distinfo     Sat Sep  5 10:25:52 2020
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.62 2020/08/18 09:39:23 schmonz Exp $
+$NetBSD: distinfo,v 1.63 2020/09/05 10:25:52 js Exp $
 
-SHA1 (gnupg-2.2.21.tar.bz2) = 4af4c6fe5f9dd7d866243f715b32775500468943
-RMD160 (gnupg-2.2.21.tar.bz2) = f76d952e0d7a18b9a3c4bad6ba077c85defbb8c2
-SHA512 (gnupg-2.2.21.tar.bz2) = b4eac75253d4a1cac341c8a1ba7bb275e849a88d5377035497777c7bcd49b5a4c91b77000311695eb7d4083856975b2b2d14518f24ab94846027280bd8c301f9
-Size (gnupg-2.2.21.tar.bz2) = 6813160 bytes
+SHA1 (gnupg-2.2.23.tar.bz2) = bd949b4af7426e4afc13667d678503063c6aa4b5
+RMD160 (gnupg-2.2.23.tar.bz2) = 48385f7d85dba9d002323032538f35a108fe266e
+SHA512 (gnupg-2.2.23.tar.bz2) = 736b39628f7e4adc650b3f9937c81f27e9ad41e77f5345dc54262c91c1cf7004243fa7f932313bcde955e0e9b3f1afc639bac18023ae878b1d26e3c5a3cabb90
+Size (gnupg-2.2.23.tar.bz2) = 7099806 bytes
 SHA1 (patch-common_sysutils.c) = 569c12e21172c1521284922244b2f4f361c945d6