Received: by mail.netbsd.org (Postfix, from userid 605) id B839E85007; Fri, 15 Jun 2018 21:51:25 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D796D85006 for ; Fri, 15 Jun 2018 21:51:24 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id cibKiMhWSlU2 for ; Fri, 15 Jun 2018 21:51:24 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id C917184D45 for ; Fri, 15 Jun 2018 21:51:23 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id B69F7FBEC; Fri, 15 Jun 2018 21:51:23 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1529099483246730" MIME-Version: 1.0 Date: Fri, 15 Jun 2018 21:51:23 +0000 From: "Tim Zingelman" Subject: CVS commit: pkgsrc/security/gnupg To: pkgsrc-changes@NetBSD.org Reply-To: tez@netbsd.org X-Mailer: log_accum Message-Id: <20180615215123.B69F7FBEC@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1529099483246730 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: tez Date: Fri Jun 15 21:51:23 UTC 2018 Modified Files: pkgsrc/security/gnupg: Makefile distinfo Log Message: gnupg: update to 1.4.23 Fixes CVE-2017-7526 Updates since 1.4.22: 2018-06-11 Werner Koch Release 1.4.23. + commit 8ae6a246bef5b5eb0684e9fb1c933a4f8441dadd 2018-06-08 Werner Koch gpg: Sanitize diagnostic with the original file name. + commit 2326851c60793653069494379b16d84e4c10a0ac * g10/mainproc.c (proc_plaintext): Sanitize verbose output. 2018-04-13 NIIBE Yutaka g10: Push compress filter only if compressed. + commit 0f8fd95ab32a6d29dac79e19f0850037c7d0c16f * g10/compress.c (handle_compressed): Fix memory leak. 2017-12-18 NIIBE Yutaka po: Update Japanese translation. + commit 1338bce5f66a95b53f18c4b54f0e9ac79604500a * po/ja.po: Fix message with no "%s". 2017-12-04 NIIBE Yutaka Damien Goutte-Gattat g10: Fix regexp sanitization. + commit 9441946e1824eb58249c58432ed1f554d0d8a102 * g10/trustdb.c (sanitize_regexp): Only escape operators. 2017-11-10 Dario Niedermann Do not use C99 feature. + commit 877e3073d731fec55a88673f91ed646a75e786c8 * cipher/rsa.c (secret): Move var decl to the beginning. 2017-09-06 Frans Spiesschaert po: update Dutch translation. + commit aa26eda8ab679a80a7be2c82478cb4440b45ec8c 2017-08-04 Marcus Brinkmann doc: Remove documentation for future option --faked-system-time. + commit eb15d5ed8e4a765998e9de7698bdc65328bcaaa3 doc/gpg.texi: Remove documentation for --faked-system-time. 2017-08-02 Daniel Kahn Gillmor debian: Remove packaging from upstream repository. + commit 9832a4bacfa5232534f2c7fe7655bd0677a41f6e Debian packaging for GnuPG is handled in debian git repositories, and doesn't belong here in the upstream repository. The packaging was significantly out of date anyway. If you're looking for debian packaging for the 1.4 branch of GnuPG, please use the following git remote: https://anonscm.debian.org/git/pkg-gnupg/gnupg1.git 2017-08-02 Joe Hansen po: Update Danish translation. + commit 12afc37a946477692257d725acac513f271c4e9e Originally reported at: http://lists.gnupg.org/pipermail/gnupg-i18n/2014-November/000308.html 2017-08-02 Frans Spiesschaert po: Update Dutch translation. + commit 6d5c5204d79fa9d01981c0076d3acde18534640a Debian-Bug-Id: 845695 2017-08-01 Manuel Venturi Porras Peralta po: Update Spanish translation. + commit 76239356bcb3bfeec5327637ed87429594868fef Debian-Bug-Id: 814541 To generate a diff of this commit: cvs rdiff -u -r1.144 -r1.145 pkgsrc/security/gnupg/Makefile cvs rdiff -u -r1.71 -r1.72 pkgsrc/security/gnupg/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1529099483246730 Content-Disposition: inline Content-Length: 1734 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/gnupg/Makefile diff -u pkgsrc/security/gnupg/Makefile:1.144 pkgsrc/security/gnupg/Makefile:1.145 --- pkgsrc/security/gnupg/Makefile:1.144 Sun Apr 29 21:32:02 2018 +++ pkgsrc/security/gnupg/Makefile Fri Jun 15 21:51:23 2018 @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.144 2018/04/29 21:32:02 adam Exp $ +# $NetBSD: Makefile,v 1.145 2018/06/15 21:51:23 tez Exp $ -DISTNAME= gnupg-1.4.22 -PKGREVISION= 3 +DISTNAME= gnupg-1.4.23 CATEGORIES= security MASTER_SITES= ftp://ftp.gnupg.org/gcrypt/gnupg/ MASTER_SITES+= ftp://ftp.ring.gr.jp/pub/net/gnupg/gnupg/ Index: pkgsrc/security/gnupg/distinfo diff -u pkgsrc/security/gnupg/distinfo:1.71 pkgsrc/security/gnupg/distinfo:1.72 --- pkgsrc/security/gnupg/distinfo:1.71 Mon Aug 14 20:12:00 2017 +++ pkgsrc/security/gnupg/distinfo Fri Jun 15 21:51:23 2018 @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.71 2017/08/14 20:12:00 wiz Exp $ +$NetBSD: distinfo,v 1.72 2018/06/15 21:51:23 tez Exp $ -SHA1 (gnupg-1.4.22.tar.bz2) = 4bad84fba712626cbbd5adf20988788028c5a5a6 -RMD160 (gnupg-1.4.22.tar.bz2) = 570106363beacbb2bb514dcf869aa335c292dffd -SHA512 (gnupg-1.4.22.tar.bz2) = c03acac0fa55761470bb085d78a44e2b99ebb187e8396cbb031a184b1e40bef2a40c91da07755d1a20610a3daa6aa1eefea2d12a0dbd5a79a45466166419c708 -Size (gnupg-1.4.22.tar.bz2) = 3746546 bytes +SHA1 (gnupg-1.4.23.tar.bz2) = 13747486ed5ff707f796f34f50f4c3085c3a6875 +RMD160 (gnupg-1.4.23.tar.bz2) = 087c494ff78bd1e85873ac383e0c6e236b6a9869 +SHA512 (gnupg-1.4.23.tar.bz2) = 78dc52a2010202a4afc8814b29fda657a6c9fe230d5e7db11ae040edd2b0ca819e1baa4dbd6c0d04d36cd353df484e83f52d17759d2891c2cf7025c0b5d36612 +Size (gnupg-1.4.23.tar.bz2) = 3749353 bytes SHA1 (patch-ab) = 24e200a04f8f31e53e22dc80ed079570cb5de8d8 --_----------=_1529099483246730--