On 2017-08-30 08:58 PM, Hongxu Jia wrote:
On 2017年08月30日 18:54, Burton, Ross wrote:
2.4 has reached feature freeze, is there anything security related in
this release that we should backport?
Based on:
https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000413.html
(and not any personal gnupg expertise)
---------------------------------------------------
Noteworthy changes in version 2.2.0
===================================
This is the new long term stable branch. This branch will only see
bug fixes and no new features.
* gpg: Reverted change done in 2.1.23 so that --no-auto-key-retrieve
is again the default.
...
---------------------------------------------------
so it seems that it might be worthwhile to allow this upgrade into the
oe-core-2.4 release or to at least check if it causes any regressions
before rejecting it.
../Randy
Here is the commits since 2.1.23, no urgent fix, we could upgrade it
after 2.4.
9d80fb8 Release 2.2.0
24462fe po: Auto update
45d5f58 scd: Convey the correct length for Le
13821e1 gpg: Fix memory leak while running --check-trustdb.
b065a69 gpg: Fix memory leak in sig-check.
757302c indent: Change comment style on two functions
02a5df6 build: Remove obsolete option from autogen.rc
565e486 gpgconf: Swap "auto-key-retrieve" and "no-auto-key-retrieve".
b917cb6 tests: Do not run trust-pgp-4.scm
008ae0b build: Change SWDB tag "gnupg21" to "gnupg22".
fd0e5b6 po: Update Norwegian translation
6158811 agent: Fix string translation for Windows
e6fa6b0 po: Update Japanese translation
c23a699 tests: Add tests for the PGP trust model.
cbe54b2 tests: Move some functions into a common module.
0161225 gpgconf: Make WoT settings configurable by gpgconf.
6e596b2 gpgscm: Fix -Wimplicit-fallthrough warnings.
e6f8411 gpg: default to --no-auto-key-retrieve.
2d6832a po: Update Russian translation
23107ba tests: Improve documentation.
977fc5f g10: Write status error on error of --quick-revoke-uid.
d6b40a9 Post release updates
e8ffa9a Release 2.1.23
//Hongxu
Ross
On 29 August 2017 at 08:00, Hongxu Jia <[email protected]
<mailto:[email protected]>> wrote:
https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000413.html
<https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000413.html>
Signed-off-by: Hongxu Jia <[email protected]
<mailto:[email protected]>>
---
meta/recipes-support/gnupg/{gnupg_2.1.23.bb
<http://gnupg_2.1.23.bb> => gnupg_2.2.0.bb
<http://gnupg_2.2.0.bb>} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-support/gnupg/{gnupg_2.1.23.bb
<http://gnupg_2.1.23.bb> => gnupg_2.2.0.bb
<http://gnupg_2.2.0.bb>} (91%)
diff --git a/meta/recipes-support/gnupg/gnupg_2.1.23.bb
<http://gnupg_2.1.23.bb>
b/meta/recipes-support/gnupg/gnupg_2.2.0.bb <http://gnupg_2.2.0.bb>
similarity index 91%
rename from meta/recipes-support/gnupg/gnupg_2.1.23.bb
<http://gnupg_2.1.23.bb>
rename to meta/recipes-support/gnupg/gnupg_2.2.0.bb
<http://gnupg_2.2.0.bb>
index 8cbe5e1..0176ddd 100644
--- a/meta/recipes-support/gnupg/gnupg_2.1.23.bb
<http://gnupg_2.1.23.bb>
+++ b/meta/recipes-support/gnupg/gnupg_2.2.0.bb
<http://gnupg_2.2.0.bb>
@@ -16,8 +16,8 @@ SRC_URI =
"${GNUPG_MIRROR}/${BPN}/${BPN}-${PV}.tar.bz2 \
file://0004-autogen.sh-fix-find-version-for-beta-checking.patch \
"
-SRC_URI[md5sum] = "86c2304ead54b74a422e76c3f1bc7a91"
-SRC_URI[sha256sum] =
"a94476391595e9351f219188767a9d6ea128e83be5ed3226a7890f49aa2d0d77"
+SRC_URI[md5sum] = "789f16949fae2d003d387f49e9da4b74"
+SRC_URI[sha256sum] =
"d4514a0be0f7a1ff263193330019eb4b53c82f0f5e230af3c14df371271a45e6"
EXTRA_OECONF = "--disable-ldap \
--disable-ccid-driver \
--
2.8.1
--
# Randy MacLeod. WR Linux
# Wind River an Intel Company
--
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core