Hello community, here is the log from the commit of package gpg2 for openSUSE:Factory checked in at 2013-10-06 14:52:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gpg2 (Old) and /work/SRC/openSUSE:Factory/.gpg2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gpg2" Changes: -------- --- /work/SRC/openSUSE:Factory/gpg2/gpg2.changes 2013-09-17 15:02:37.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.gpg2.new/gpg2.changes 2013-10-06 14:52:48.000000000 +0200 @@ -1,0 +2,11 @@ +Sat Oct 5 11:44:42 UTC 2013 - [email protected] + +- update to 2.0.22 [bnc#844175] + * Fixed possible infinite recursion in the compressed packet + parser. [CVE-2013-4402] + * Improved support for some card readers. + * Prepared building with the forthcoming Libgcrypt 1.6. + * Protect against rogue keyservers sending secret keys. +- remove gpg2-CVE-2013-4351.patch, committed upstream + +------------------------------------------------------------------- Old: ---- gnupg-2.0.21.tar.bz2 gnupg-2.0.21.tar.bz2.sig gpg2-CVE-2013-4351.patch New: ---- gnupg-2.0.22.tar.bz2 gnupg-2.0.22.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gpg2.spec ++++++ --- /var/tmp/diff_new_pack.5Mrvaf/_old 2013-10-06 14:52:49.000000000 +0200 +++ /var/tmp/diff_new_pack.5Mrvaf/_new 2013-10-06 14:52:49.000000000 +0200 @@ -17,7 +17,7 @@ Name: gpg2 -Version: 2.0.21 +Version: 2.0.22 Release: 0 BuildRequires: automake >= 1.10 BuildRequires: expect @@ -64,7 +64,6 @@ Patch9: gnupg-detect_FIPS_mode.patch # PATCH-FIX-OPENSUSE [email protected] -- automake 1.13 already includes $SHELL Patch10: gnupg-2.0.20-automake113.diff -Patch11: gpg2-CVE-2013-4351.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -84,7 +83,6 @@ %patch8 -p1 %patch9 -p1 %patch10 -p1 -%patch11 -p1 %build autoreconf -fi ++++++ gnupg-2.0.21.tar.bz2 -> gnupg-2.0.22.tar.bz2 ++++++ ++++ 86519 lines of diff (skipped) ++++++ gnupg-2.0.9-RSA_ES.patch ++++++ --- /var/tmp/diff_new_pack.5Mrvaf/_old 2013-10-06 14:52:51.000000000 +0200 +++ /var/tmp/diff_new_pack.5Mrvaf/_new 2013-10-06 14:52:51.000000000 +0200 @@ -3,43 +3,43 @@ # g10/misc.c | 8 ++++++++ # 1 file changed, 8 insertions(+) # -Index: gnupg-2.0.20/g10/misc.c +Index: gnupg-2.0.22/g10/misc.c =================================================================== ---- gnupg-2.0.20.orig/g10/misc.c 2013-05-10 13:55:47.000000000 +0100 -+++ gnupg-2.0.20/g10/misc.c 2013-05-10 19:57:18.000000000 +0100 -@@ -1326,6 +1326,8 @@ pubkey_get_npkey( int algo ) +--- gnupg-2.0.22.orig/g10/misc.c 2013-10-04 16:54:48.000000000 +0100 ++++ gnupg-2.0.22/g10/misc.c 2013-10-05 12:39:16.000000000 +0100 +@@ -1333,6 +1333,8 @@ pubkey_get_npkey( int algo ) if (algo == GCRY_PK_ELG_E) algo = GCRY_PK_ELG; + if (algo == GCRY_PK_RSA_E || algo == GCRY_PK_RSA_S) + algo = GCRY_PK_RSA; - if (gcry_pk_algo_info( algo, GCRYCTL_GET_ALGO_NPKEY, NULL, &n)) + if (gcry_pk_algo_info (map_pk_openpgp_to_gcry (algo), + GCRYCTL_GET_ALGO_NPKEY, NULL, &n)) n = 0; - return n; -@@ -1339,6 +1341,8 @@ pubkey_get_nskey( int algo ) +@@ -1353,6 +1355,8 @@ pubkey_get_nskey( int algo ) if (algo == GCRY_PK_ELG_E) algo = GCRY_PK_ELG; + if (algo == GCRY_PK_RSA_E || algo == GCRY_PK_RSA_S) + algo = GCRY_PK_RSA; - if (gcry_pk_algo_info( algo, GCRYCTL_GET_ALGO_NSKEY, NULL, &n )) + if (gcry_pk_algo_info (map_pk_openpgp_to_gcry (algo), + GCRYCTL_GET_ALGO_NSKEY, NULL, &n )) n = 0; - return n; -@@ -1352,6 +1356,8 @@ pubkey_get_nsig( int algo ) +@@ -1373,6 +1377,8 @@ pubkey_get_nsig( int algo ) if (algo == GCRY_PK_ELG_E) algo = GCRY_PK_ELG; + if (algo == GCRY_PK_RSA_E || algo == GCRY_PK_RSA_S) + algo = GCRY_PK_RSA; - if (gcry_pk_algo_info( algo, GCRYCTL_GET_ALGO_NSIGN, NULL, &n)) + if (gcry_pk_algo_info (map_pk_openpgp_to_gcry (algo), + GCRYCTL_GET_ALGO_NSIGN, NULL, &n)) n = 0; - return n; -@@ -1365,6 +1371,8 @@ pubkey_get_nenc( int algo ) +@@ -1393,6 +1399,8 @@ pubkey_get_nenc( int algo ) if (algo == GCRY_PK_ELG_E) algo = GCRY_PK_ELG; + if (algo == GCRY_PK_RSA_E || algo == GCRY_PK_RSA_S) + algo = GCRY_PK_RSA; - if (gcry_pk_algo_info( algo, GCRYCTL_GET_ALGO_NENCR, NULL, &n )) + if (gcry_pk_algo_info (map_pk_openpgp_to_gcry (algo), + GCRYCTL_GET_ALGO_NENCR, NULL, &n )) n = 0; - return n; -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
