---
- branch: MAIN
  date: Fri Jun 15 21:51:23 UTC 2018
  files:
  - new: '1.145'
    old: '1.144'
    path: pkgsrc/security/gnupg/Makefile
    pathrev: pkgsrc/security/gnupg/Makefile@1.145
    type: modified
  - new: '1.72'
    old: '1.71'
    path: pkgsrc/security/gnupg/distinfo
    pathrev: pkgsrc/security/gnupg/distinfo@1.72
    type: modified
  id: 20180615T215123Z.d8e54290759cdd7b89ecb23e8728e812b37a372c
  log: |
    gnupg: update to 1.4.23

    Fixes CVE-2017-7526

    Updates since 1.4.22:

    2018-06-11  Werner Koch  <wk@gnupg.org>

            Release 1.4.23.
            + commit 8ae6a246bef5b5eb0684e9fb1c933a4f8441dadd

    2018-06-08  Werner Koch  <wk@gnupg.org>

            gpg: Sanitize diagnostic with the original file name.
            + commit 2326851c60793653069494379b16d84e4c10a0ac
            * g10/mainproc.c (proc_plaintext): Sanitize verbose output.

    2018-04-13  NIIBE Yutaka  <gniibe@fsij.org>

            g10: Push compress filter only if compressed.
            + commit 0f8fd95ab32a6d29dac79e19f0850037c7d0c16f
            * g10/compress.c (handle_compressed): Fix memory leak.

    2017-12-18  NIIBE Yutaka  <gniibe@fsij.org>

            po: Update Japanese translation.
            + commit 1338bce5f66a95b53f18c4b54f0e9ac79604500a
            * po/ja.po: Fix message with no "%s".

    2017-12-04  NIIBE Yutaka  <gniibe@fsij.org>
                Damien Goutte-Gattat  <dgouttegattat@incenp.org>

            g10: Fix regexp sanitization.
            + commit 9441946e1824eb58249c58432ed1f554d0d8a102
            * g10/trustdb.c (sanitize_regexp): Only escape operators.

    2017-11-10  Dario Niedermann  <dario@darioniedermann.it>

            Do not use C99 feature.
            + commit 877e3073d731fec55a88673f91ed646a75e786c8
            * cipher/rsa.c (secret): Move var decl to the beginning.

    2017-09-06  Frans Spiesschaert  <Frans.Spiesschaert@yucom.be>

            po: update Dutch translation.
            + commit aa26eda8ab679a80a7be2c82478cb4440b45ec8c

    2017-08-04  Marcus Brinkmann  <marcus.brinkmann@ruhr-uni-bochum.de>

            doc: Remove documentation for future option --faked-system-time.
            + commit eb15d5ed8e4a765998e9de7698bdc65328bcaaa3
            doc/gpg.texi: Remove documentation for --faked-system-time.

    2017-08-02  Daniel Kahn Gillmor  <dkg@fifthhorseman.net>

            debian: Remove packaging from upstream repository.
            + commit 9832a4bacfa5232534f2c7fe7655bd0677a41f6e
            Debian packaging for GnuPG is handled in debian git repositories, and
            doesn't belong here in the upstream repository.  The packaging was
            significantly out of date anyway.

            If you're looking for debian packaging for the 1.4 branch of GnuPG,
            please use the following git remote:

                https://anonscm.debian.org/git/pkg-gnupg/gnupg1.git

    2017-08-02  Joe Hansen  <joedalton2@yahoo.dk>

            po: Update Danish translation.
            + commit 12afc37a946477692257d725acac513f271c4e9e
            Originally reported at:
            http://lists.gnupg.org/pipermail/gnupg-i18n/2014-November/000308.html

    2017-08-02  Frans Spiesschaert  <Frans.Spiesschaert@yucom.be>

            po: Update Dutch translation.
            + commit 6d5c5204d79fa9d01981c0076d3acde18534640a
            Debian-Bug-Id: 845695

    2017-08-01  Manuel Venturi Porras Peralta  <venturi@openmailbox.org>

            po: Update Spanish translation.
            + commit 76239356bcb3bfeec5327637ed87429594868fef
            Debian-Bug-Id: 814541
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/gnupg'
  unixtime: '1529099483'
  user: tez