Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gpg2 for openSUSE:Factory checked in at 2026-07-08 17:35:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gpg2 (Old) and /work/SRC/openSUSE:Factory/.gpg2.new.1982 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gpg2" Wed Jul 8 17:35:25 2026 rev:202 rq:1364290 version:2.5.21 Changes: -------- --- /work/SRC/openSUSE:Factory/gpg2/gpg2.changes 2026-05-16 19:25:35.848671151 +0200 +++ /work/SRC/openSUSE:Factory/.gpg2.new.1982/gpg2.changes 2026-07-08 17:37:22.903241622 +0200 @@ -1,0 +2,20 @@ +Sun Jul 5 16:28:05 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to 2.5.21: + * gpg, gpgsm: Use partial file on decryption, remove on failure. + Disable with "--compatibility-flags=no-partial-file-guard". + * gpg: Use the INT_RCP_FPR subpacket in revocation signatures. + * gpg: Fix potential use-after-free in batch key generation when + handling the keyserver URL option + * gpgsm: Fix regression in gpgsm_verify with expired certificates. + * gpgsm: Require a minimum tag length for GCM decryption. + (CVE-2026-57062, boo#1269279) + * scd: Limit the size of returned APDU objects from faulty cards. + * scd: Fix condition to retrieve ATR + * scd:openpgp: Fix regression in CHV1 retry counter byte index. + * agent: Make batch import of Kyber keys work + * dirmngr: Add a validation check in get_dns_cert_standard. + * gpgconf: Raise an error on certain parse errors. +- rebase gnupg-set_umask_before_open_outfile.patch + +------------------------------------------------------------------- Old: ---- gnupg-2.5.20.tar.bz2 gnupg-2.5.20.tar.bz2.sig New: ---- gnupg-2.5.21.tar.bz2 gnupg-2.5.21.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gpg2.spec ++++++ --- /var/tmp/diff_new_pack.yTk2aD/_old 2026-07-08 17:37:25.151319970 +0200 +++ /var/tmp/diff_new_pack.yTk2aD/_new 2026-07-08 17:37:25.155320109 +0200 @@ -18,7 +18,7 @@ Name: gpg2 -Version: 2.5.20 +Version: 2.5.21 Release: 0 Summary: File encryption, decryption, signature creation and verification utility License: GPL-3.0-or-later ++++++ gnupg-2.5.20.tar.bz2 -> gnupg-2.5.21.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/gpg2/gnupg-2.5.20.tar.bz2 /work/SRC/openSUSE:Factory/.gpg2.new.1982/gnupg-2.5.21.tar.bz2 differ: char 11, line 1 ++++++ gnupg-set_umask_before_open_outfile.patch ++++++ --- /var/tmp/diff_new_pack.yTk2aD/_old 2026-07-08 17:37:25.351326940 +0200 +++ /var/tmp/diff_new_pack.yTk2aD/_new 2026-07-08 17:37:25.355327079 +0200 @@ -1,7 +1,7 @@ -Index: gnupg-2.3.0/g10/plaintext.c +Index: gnupg-2.5.21/g10/plaintext.c =================================================================== ---- gnupg-2.3.0.orig/g10/plaintext.c -+++ gnupg-2.3.0/g10/plaintext.c +--- gnupg-2.5.21.orig/g10/plaintext.c ++++ gnupg-2.5.21/g10/plaintext.c @@ -24,6 +24,7 @@ #include <string.h> #include <errno.h> @@ -20,25 +20,22 @@ /* Get the output filename. On success, the actual filename that is used is set in *FNAMEP and a filepointer is returned in *FP. -@@ -161,11 +165,15 @@ get_output_file (const byte *embedded_na - log_error (_("error creating '%s': %s\n"), fname, gpg_strerror (err)); - goto leave; - } -- else if (!(fp = es_fopen (fname, "wb"))) -- { -- err = gpg_error_from_syserror (); -- log_error (_("error creating '%s': %s\n"), fname, gpg_strerror (err)); -- goto leave; -+ else { -+ mode_t saved_umask = umask(GPG_SAFE_UMASK); -+ if( !(fp = es_fopen(fname,"wb")) ) { -+ err = gpg_error_from_syserror (); -+ log_error(_("error creating `%s': %s\n"), fname, strerror(errno) ); -+ umask(saved_umask); -+ goto leave; -+ } -+ umask(saved_umask); +@@ -174,14 +178,16 @@ get_output_file (const byte *embedded_na + } + fname_part = filename; + } +- ++ mode_t saved_umask = umask(GPG_SAFE_UMASK); + if (!(fp = es_fopen (filename, "wb"))) + { + err = gpg_error_from_syserror (); + log_error (_("error creating '%s': %s\n"), filename, + gpg_strerror (err)); ++ umask(saved_umask); + goto leave; + } ++ umask(saved_umask); + using_file = 1; } - leave:
