Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *gnupg* to *2.5.21* has Succeeded.
Next steps:
- apply the patch: git am 0001-gnupg-upgrade-2.5.20-2.5.21.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From cbb4c197516cff9f1a59025545b93183e62b7013 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Fri, 24 Jul 2026 05:40:12 +0000
Subject: [PATCH] gnupg: upgrade 2.5.20 -> 2.5.21
Source: ChangeLog
2026-07-02 Werner Koch <[email protected]>
Release 2.5.21.
+ commit 363096d9c9a973ac8dcad8ee4efd479f50add290
2026-06-30 Werner Koch <[email protected]>
speedo: Create a pkgversioninfo.txt file.
+ commit 8716b4dac4a79b600d18847b8bc0193bd06e1fc1
* build-aux/mk-sbom.sh: New. Taken from gpg4win and extended.
* Makefile.am (EXTRA_DIST): Add it.
* build-aux/speedo.mk (gnupg_ver_this): Use sed to extract version.
(gnupg_commit_id): new.
(00-unpack): Call mk-sbom.sh.
(clean-pkg-versions: Clear version files.
($(bdir)/pkgversioninfo.txt): New.
(all-speedo,installer): Depend on above.
(dist-source): Exclude autom4te.cache just in case
* build-aux/speedo/w32/inst.nsi: Install pkgversioninfo.txt.
2026-06-30 NIIBE Yutaka <[email protected]>
scd: Fix condition to retrieve ATR.
+ commit ca25a7a61bebbe4e27dd5568c5b049675b7aa4ae
* scd/app.c (atr_to_cardtype): Call apdu_get_atr when ATR is NULL.
2026-06-29 Werner Koch <[email protected]>
speedo: Fix passing configure args to w32 builds.
+ commit 7af73849a5dbbc5c70e43c3a3f5d70c639c80ab4
* build-aux/speedo.mk (pkgcfg): Use correct number of dollar signs.
common: Prepare to get rid of map_w32_to_errno.
+ commit bf808091534f587e8cdacf351b0e7ba060165fd8
* common/sysutils.c (gnupg_w32_set_errno): Use gpgrt function if
available.
agent: Make batch import of Kyber keys work.
+ commit 4fca79b67bba04bc5ef2a4402e948c01821ceac5
* agent/command.c (cmd_import_key): Allow --unattended also for
composite keys.
2026-06-26 NIIBE Yutaka <[email protected]>
dirmngr: Add a validation check in get_dns_cert_standard.
+ commit c3ec7678799a161b9265969e7ad3fd59605b18ab
* dirmngr/dns-stuff.c (get_dns_cert_standard): Validate the length.
2026-06-19 NIIBE Yutaka <[email protected]>
build: Update ldap.m4 for POSIX with no LDAP_DEPRECATED.
+ commit d3822099fdd4d84323afae4bacaadfeab9cb3e27
* m4/ldap.m4: Check ldap_err2string, instead.
2026-06-18 Werner Koch <[email protected]>
gpgsm: Require a minimum tag length for GCM decryption.
+ commit 4c7e68cf3d335328821bdbb70db309a60d0e4fd4
* sm/decrypt.c (gpgsm_decrypt): Require a minimum authtaglen.
2026-06-18 NIIBE Yutaka <[email protected]>
w32:common: Fix usleep in w32_wait_when_sharing_violation.
+ commit ab9ce5f5e775a3a6a37923299685ac371f740103
* common/sysutils.c (w32_wait_when_sharing_violation): WTIME is
in milliseconds.
2026-06-17 Philip Le <[email protected]>
gpg: Fix copy_signature.
+ commit 56e11ffe971d5cc58185b4e8d02b82dc432c634b
* g10/free-packet.c (copy_signature): Set the signers_uid of the new
copy to NULL if it is not present in the source signature.
gpg: Use the INT_RCP_FPR subpacket in revocation signatures.
+ commit 9e0e5547d2a008332873a9b632f82f9414ad887f
* common/openpgpdefs.h (sigsubpkttype_t): Add Intended Recipient
Fingerprint signature subpacket.
* g10/build-packet.c (build_sig_subpkt): Build the Intended Recipient
Fingerprint signature subpacket for v4 and v5 keys.
* g10/free-packet.c (fre
[Changelog truncated as it exceeds 3000 characters;
the full changelog can be found in an attachment to the AUH email]
---
...erride-init-is-not-needed-with-gcc-9.patch | 2 +-
...-a-custom-value-for-the-location-of-.patch | 6 +--
...use-pkgconfig-instead-of-npth-config.patch | 2 +-
.../gnupg/gnupg/CVE-2026-57062.patch | 43 -------------------
.../gnupg/gnupg/relocate.patch | 18 ++++----
.../{gnupg_2.5.20.bb => gnupg_2.5.21.bb} | 4 +-
6 files changed, 16 insertions(+), 59 deletions(-)
delete mode 100644 meta/recipes-support/gnupg/gnupg/CVE-2026-57062.patch
rename meta/recipes-support/gnupg/{gnupg_2.5.20.bb => gnupg_2.5.21.bb} (95%)
diff --git
a/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
b/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
index b48db40970..7a3fa59c54 100644
---
a/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
+++
b/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
@@ -1,4 +1,4 @@
-From 9b7ef8aa1a5d71fc95f36a92874d3faa4579fc4e Mon Sep 17 00:00:00 2001
+From 46db1301b1b71f47aa131b9a3de9d1cf356cf408 Mon Sep 17 00:00:00 2001
From: Khem Raj <[email protected]>
Date: Thu, 20 Dec 2018 17:37:48 -0800
Subject: [PATCH] Woverride-init is not needed with gcc 9
diff --git
a/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
b/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
index bfee9c9904..1c7cd7ba7b 100644
---
a/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
+++
b/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
@@ -1,4 +1,4 @@
-From 84a16d46a72a2501cbe3a4a83ea7f8393ada4038 Mon Sep 17 00:00:00 2001
+From fd060f524e50c7c3f8694f71630ac151627235f1 Mon Sep 17 00:00:00 2001
From: Alexander Kanavin <[email protected]>
Date: Mon, 22 Jan 2018 18:00:21 +0200
Subject: [PATCH] configure.ac: use a custom value for the location of
@@ -13,10 +13,10 @@ Signed-off-by: Alexander Kanavin <[email protected]>
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/configure.ac b/configure.ac
-index 023604b..c84442c 100644
+index 5ac4d0b..09615c5 100644
--- a/configure.ac
+++ b/configure.ac
-@@ -1908,7 +1908,7 @@ AC_DEFINE_UNQUOTED(GPGCONF_DISP_NAME, "GPGConf",
+@@ -1909,7 +1909,7 @@ AC_DEFINE_UNQUOTED(GPGCONF_DISP_NAME, "GPGConf",
AC_DEFINE_UNQUOTED(GPGTAR_NAME, "gpgtar", [The name of the gpgtar tool])
diff --git
a/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
b/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
index 90d53674d4..f4c9b2161a 100644
---
a/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
+++
b/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
@@ -1,4 +1,4 @@
-From 0c3a09a95875e5744a910a0d3c93fa2e9dbe8c69 Mon Sep 17 00:00:00 2001
+From b8a99b2d9caa05f54be25635e3b1687753fe7196 Mon Sep 17 00:00:00 2001
From: Saul Wold <[email protected]>
Date: Wed, 16 Aug 2017 11:16:30 +0800
Subject: [PATCH] use pkgconfig instead of npth config
diff --git a/meta/recipes-support/gnupg/gnupg/CVE-2026-57062.patch
b/meta/recipes-support/gnupg/gnupg/CVE-2026-57062.patch
deleted file mode 100644
index f298b6e9a8..0000000000
--- a/meta/recipes-support/gnupg/gnupg/CVE-2026-57062.patch
+++ /dev/null
@@ -1,43 +0,0 @@
-From d586f50ee849c8cbeaea47b50c64446c1becbf9b Mon Sep 17 00:00:00 2001
-From: Werner Koch <[email protected]>
-Date: Thu, 18 Jun 2026 10:51:34 +0200
-Subject: [PATCH] gpgsm: Require a minimum tag length for GCM decryption.
-
-* sm/decrypt.c (gpgsm_decrypt): Require a minimum authtaglen.
---
-
-Reported-by: Thai Duong <[email protected]>
-This is similar to OpenSSL's
-CVE-id: CVE-2026-34182
-
-CVE: CVE-2026-57062
-Upstream-Status: Backport
[https://github.com/gpg/gnupg/commit/4c7e68cf3d335328821bdbb70db309a60d0e4fd4]
-
-Signed-off-by: Roland Kovacs <[email protected]>
----
- sm/decrypt.c | 9 ++++++++-
- 1 file changed, 8 insertions(+), 1 deletion(-)
-
-diff --git a/sm/decrypt.c b/sm/decrypt.c
-index 20fb96060..92a33c6e6 100644
---- a/sm/decrypt.c
-+++ b/sm/decrypt.c
-@@ -1447,7 +1447,14 @@ gpgsm_decrypt (ctrl_t ctrl, estream_t in_fp, estream_t
out_fp)
- }
- if (DBG_CRYPTO)
- log_printhex (authtag, authtaglen, "Authtag ...:");
-- rc = gcry_cipher_checktag (dfparm.hd, authtag, authtaglen);
-+ if (authtaglen < 12)
-+ {
-+ log_info ("authentication tag is too short (%zu octets)\n",
-+ authtaglen);
-+ rc = gpg_error (GPG_ERR_CHECKSUM);
-+ }
-+ else
-+ rc = gcry_cipher_checktag (dfparm.hd, authtag, authtaglen);
- xfree (authtag);
- if (rc)
- log_error ("data is not authentic: %s\n", gpg_strerror (rc));
---
-2.34.1
-
diff --git a/meta/recipes-support/gnupg/gnupg/relocate.patch
b/meta/recipes-support/gnupg/gnupg/relocate.patch
index fedb7f6407..02f03386ec 100644
--- a/meta/recipes-support/gnupg/gnupg/relocate.patch
+++ b/meta/recipes-support/gnupg/gnupg/relocate.patch
@@ -1,4 +1,4 @@
-From 8d7658741da050f604bcf26f8a6c24a0b15df94b Mon Sep 17 00:00:00 2001
+From c70694bd3e71cc1fec6ccb3ea0f694c3863ebd48 Mon Sep 17 00:00:00 2001
From: Ross Burton <[email protected]>
Date: Wed, 19 Sep 2018 14:44:40 +0100
Subject: [PATCH] Allow the environment to override where gnupg looks for its
@@ -13,10 +13,10 @@ Signed-off-by: Alexander Kanavin <[email protected]>
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/common/homedir.c b/common/homedir.c
-index d26ddd9..24224c0 100644
+index 835f0ea..0a67a33 100644
--- a/common/homedir.c
+++ b/common/homedir.c
-@@ -1451,7 +1451,7 @@ gnupg_socketdir (void)
+@@ -1526,7 +1526,7 @@ gnupg_socketdir (void)
if (!name)
{
unsigned int dummy;
@@ -25,7 +25,7 @@ index d26ddd9..24224c0 100644
gpgrt_annotate_leaked_object (name);
}
-@@ -1480,7 +1480,7 @@ gnupg_sysconfdir (void)
+@@ -1555,7 +1555,7 @@ gnupg_sysconfdir (void)
if (dir)
return dir;
else
@@ -34,7 +34,7 @@ index d26ddd9..24224c0 100644
#endif /*!HAVE_W32_SYSTEM*/
}
-@@ -1516,7 +1516,7 @@ gnupg_bindir (void)
+@@ -1591,7 +1591,7 @@ gnupg_bindir (void)
return name;
}
else
@@ -43,7 +43,7 @@ index d26ddd9..24224c0 100644
#endif /*!HAVE_W32_SYSTEM*/
}
-@@ -1543,7 +1543,7 @@ gnupg_libexecdir (void)
+@@ -1618,7 +1618,7 @@ gnupg_libexecdir (void)
return name;
}
else
@@ -52,7 +52,7 @@ index d26ddd9..24224c0 100644
#endif /*!HAVE_W32_SYSTEM*/
}
-@@ -1573,7 +1573,7 @@ gnupg_libdir (void)
+@@ -1648,7 +1648,7 @@ gnupg_libdir (void)
return name;
}
else
@@ -61,7 +61,7 @@ index d26ddd9..24224c0 100644
#endif /*!HAVE_W32_SYSTEM*/
}
-@@ -1604,7 +1604,7 @@ gnupg_datadir (void)
+@@ -1679,7 +1679,7 @@ gnupg_datadir (void)
return name;
}
else
@@ -70,7 +70,7 @@ index d26ddd9..24224c0 100644
#endif /*!HAVE_W32_SYSTEM*/
}
-@@ -1636,7 +1636,7 @@ gnupg_localedir (void)
+@@ -1711,7 +1711,7 @@ gnupg_localedir (void)
return name;
}
else
diff --git a/meta/recipes-support/gnupg/gnupg_2.5.20.bb
b/meta/recipes-support/gnupg/gnupg_2.5.21.bb
similarity index 95%
rename from meta/recipes-support/gnupg/gnupg_2.5.20.bb
rename to meta/recipes-support/gnupg/gnupg_2.5.21.bb
index 4a72d8c8f0..e34c09fc8c 100644
--- a/meta/recipes-support/gnupg/gnupg_2.5.20.bb
+++ b/meta/recipes-support/gnupg/gnupg_2.5.21.bb
@@ -20,13 +20,13 @@ UPSTREAM_CHECK_URI = "https://gnupg.org/ftp/gcrypt/gnupg/";
SRC_URI = "${GNUPG_MIRROR}/${BPN}/${BPN}-${PV}.tar.bz2 \
file://0002-use-pkgconfig-instead-of-npth-config.patch \
file://0001-Woverride-init-is-not-needed-with-gcc-9.patch \
- file://CVE-2026-57062.patch \
+ file://relocate.patch \
"
SRC_URI:append:class-native = "
file://0001-configure.ac-use-a-custom-value-for-the-location-of-.patch \
file://relocate.patch"
SRC_URI:append:class-nativesdk = " file://relocate.patch"
-SRC_URI[sha256sum] =
"6461266e99c308419a379abe6c356d54c214136c4589bd65951091138989ffc6"
+SRC_URI[sha256sum] =
"e3af2c8caa46a66a9329fa7c6880af260451914d819595beabc2c26597b31352"
EXTRA_OECONF = "--disable-ldap \
--disable-ccid-driver \
--
2.47.1
packages/x86-64-v3-poky-linux/gnupg/gnupg-dbg: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-dbg: PKGSIZE changed from 22341944 to 22317736 (-0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-dbg: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-dev: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-dev: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-doc: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-doc: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-gpg: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-gpg: PKGSIZE changed from 1743880 to 1752072 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-gpg: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ca: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ca: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-cs: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-cs: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-da: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-da: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-de: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-de: PKGSIZE changed from 248505 to 249118 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-de: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-el: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-el: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+boldquot: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+boldquot: PKGSIZE changed from 226459 to 226925 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+boldquot: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+quot: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+quot: PKGSIZE changed from 224051 to 224509 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-en+quot: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-eo: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-eo: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-es: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-es: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-et: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-et: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-fi: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-fi: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-fr: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-fr: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-gl: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-gl: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-hu: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-hu: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-id: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-id: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-it: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-it: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ja: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ja: PKGSIZE changed from 255837 to 256047 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ja: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ka: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ka: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-nb: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-nb: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-nl: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-nl: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-pl: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-pl: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-pt: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-pt: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ro: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ro: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ru: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-ru: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-sk: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-sk: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-sv: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-sv: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-tr: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-tr: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-uk: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-uk: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-zh-cn: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-zh-cn: PKGSIZE changed from 218937 to 218941 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-zh-cn: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-zh-tw: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-locale-zh-tw: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-src: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-src: PKGSIZE changed from 9173821 to 9187027 (+0%) packages/x86-64-v3-poky-linux/gnupg/gnupg-src: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg-src: FILELIST: directory renamed /usr/src/debug/gnupg/2.5.20/regexp -> /usr/src/debug/gnupg/2.5.21/regexp, directory renamed /usr/src/debug/gnupg/2.5.20/kbx -> /usr/src/debug/gnupg/2.5.21/kbx, directory renamed /usr/src/debug/gnupg/2.5.20/dirmngr -> /usr/src/debug/gnupg/2.5.21/dirmngr, directory renamed /usr/src/debug/gnupg/2.5.20/common -> /usr/src/debug/gnupg/2.5.21/common, directory renamed /usr/src/debug/gnupg/2.5.20/tools -> /usr/src/debug/gnupg/2.5.21/tools, directory renamed /usr/src/debug/gnupg/2.5.20/agent -> /usr/src/debug/gnupg/2.5.21/agent, directory renamed /usr/src/debug/gnupg/2.5.20/g10 -> /usr/src/debug/gnupg/2.5.21/g10, directory renamed /usr/src/debug/gnupg/2.5.20/sm -> /usr/src/debug/gnupg/2.5.21/sm, directory renamed /usr/src/debug/gnupg/2.5.20/scd -> /usr/src/debug/gnupg/2.5.21/scd packages/x86-64-v3-poky-linux/gnupg/gnupg-staticdev: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg-staticdev: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg/gnupg: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg/gnupg: PKGSIZE changed from 4770308 to 4766340 (-0%) packages/x86-64-v3-poky-linux/gnupg/gnupg: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg: PV changed from "2.5.20" to "2.5.21" packages/x86-64-v3-poky-linux/gnupg: PKGV changed from 2.5.20 [default] to 2.5.21 [default] packages/x86-64-v3-poky-linux/gnupg: SRC_URI changed from "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.5.20.tar.bz2 file://0002-use-pkgconfig-instead-of-npth-config.patch file://0001-Woverride-init-is-not-needed-with-gcc-9.patch file://CVE-2026-57062.patch" to "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.5.21.tar.bz2 file://0002-use-pkgconfig-instead-of-npth-config.patch file://0001-Woverride-init-is-not-needed-with-gcc-9.patch file://relocate.patch"
0001-gnupg-upgrade-2.5.20-2.5.21.patch
Description: Binary data
Changelog for gnupg: 2.5.20 -> 2.5.21 Source: ChangeLog 2026-07-02 Werner Koch <[email protected]> Release 2.5.21. + commit 363096d9c9a973ac8dcad8ee4efd479f50add290 2026-06-30 Werner Koch <[email protected]> speedo: Create a pkgversioninfo.txt file. + commit 8716b4dac4a79b600d18847b8bc0193bd06e1fc1 * build-aux/mk-sbom.sh: New. Taken from gpg4win and extended. * Makefile.am (EXTRA_DIST): Add it. * build-aux/speedo.mk (gnupg_ver_this): Use sed to extract version. (gnupg_commit_id): new. (00-unpack): Call mk-sbom.sh. (clean-pkg-versions: Clear version files. ($(bdir)/pkgversioninfo.txt): New. (all-speedo,installer): Depend on above. (dist-source): Exclude autom4te.cache just in case * build-aux/speedo/w32/inst.nsi: Install pkgversioninfo.txt. 2026-06-30 NIIBE Yutaka <[email protected]> scd: Fix condition to retrieve ATR. + commit ca25a7a61bebbe4e27dd5568c5b049675b7aa4ae * scd/app.c (atr_to_cardtype): Call apdu_get_atr when ATR is NULL. 2026-06-29 Werner Koch <[email protected]> speedo: Fix passing configure args to w32 builds. + commit 7af73849a5dbbc5c70e43c3a3f5d70c639c80ab4 * build-aux/speedo.mk (pkgcfg): Use correct number of dollar signs. common: Prepare to get rid of map_w32_to_errno. + commit bf808091534f587e8cdacf351b0e7ba060165fd8 * common/sysutils.c (gnupg_w32_set_errno): Use gpgrt function if available. agent: Make batch import of Kyber keys work. + commit 4fca79b67bba04bc5ef2a4402e948c01821ceac5 * agent/command.c (cmd_import_key): Allow --unattended also for composite keys. 2026-06-26 NIIBE Yutaka <[email protected]> dirmngr: Add a validation check in get_dns_cert_standard. + commit c3ec7678799a161b9265969e7ad3fd59605b18ab * dirmngr/dns-stuff.c (get_dns_cert_standard): Validate the length. 2026-06-19 NIIBE Yutaka <[email protected]> build: Update ldap.m4 for POSIX with no LDAP_DEPRECATED. + commit d3822099fdd4d84323afae4bacaadfeab9cb3e27 * m4/ldap.m4: Check ldap_err2string, instead. 2026-06-18 Werner Koch <[email protected]> gpgsm: Require a minimum tag length for GCM decryption. + commit 4c7e68cf3d335328821bdbb70db309a60d0e4fd4 * sm/decrypt.c (gpgsm_decrypt): Require a minimum authtaglen. 2026-06-18 NIIBE Yutaka <[email protected]> w32:common: Fix usleep in w32_wait_when_sharing_violation. + commit ab9ce5f5e775a3a6a37923299685ac371f740103 * common/sysutils.c (w32_wait_when_sharing_violation): WTIME is in milliseconds. 2026-06-17 Philip Le <[email protected]> gpg: Fix copy_signature. + commit 56e11ffe971d5cc58185b4e8d02b82dc432c634b * g10/free-packet.c (copy_signature): Set the signers_uid of the new copy to NULL if it is not present in the source signature. gpg: Use the INT_RCP_FPR subpacket in revocation signatures. + commit 9e0e5547d2a008332873a9b632f82f9414ad887f * common/openpgpdefs.h (sigsubpkttype_t): Add Intended Recipient Fingerprint signature subpacket. * g10/build-packet.c (build_sig_subpkt): Build the Intended Recipient Fingerprint signature subpacket for v4 and v5 keys. * g10/free-packet.c (free_seckey_enc): Free rev_subject_info. (copy_signature): Copy the rev_subject_info struct too. * g10/import.c (import_one): Print info that addtional revocation signatures are checked. (import_revoke_cert): Use the new INT_RCP_FPR subpacket to check revocation signature if the subpacket is present. * g10/packet.h (rev_subject_info_s): New. Contains the fingerprint of the to be revoked key in a revocation signature. (PKT_signature): Add rev_subject_info. * g10/parse-packet.c (dump_sig_subpkt): Print info line about INT_RCP_FPR signature subpacket. (parse_signature): Parse INT_RCP_FPR signature subpacket. * g10/sig-check.c (check_key_signature): Check the revocation signature and ignore revocation for already revoked keys. * g10/sign.c (make_keysig_packet): Write the fingerprint of the to be revoked key into sig->rev_subject_info. 2026-06-15 NIIBE Yutaka <[email protected]> gpg: Fix partial file handling. + commit a54dff1b151b85837714b199f316cbb339275ddc * g10/misc.c (gnupg_register_partial_file): Fix possible memory leaks. (gnupg_process_partial_file): Better error message. * g10/plaintext.c (pfg_close_file): Likewise. 2026-06-12 NIIBE Yutaka <[email protected]> gpg: Defer renaming at exit, so that it can remove on failure. + commit ab2e64e4b490bf9ea45f7aff2060e16e7b2b7119 * g10/main.h (gnupg_register_partial_file): New. (gnupg_process_partial_file): New. * g10/misc.c (gnupg_register_partial_file): New. (gnupg_process_partial_file): New. * g10/plaintext.c (pfg_close_file): Add log_info when remove. Register the file rename. * g10/gpg.c (g10_exit): Call gnupg_process_partial_file. 2026-06-11 Werner Koch <[email protected]> gpg-authcode-sign: Avoid syntax error if input file does not exist. + commit a9c9435cd4471232a252785b69e4dd44379bc49f * tools/gpg-authcode-sign.sh (cleanup): Check that file exists. 2026-06-09 Mikhail Filippov <[email protected]> scd:openpgp: Fix CHV1 retry counter byte index. + commit 245330ebeaf67f8e87fef979777c24b983f1a519 * scd/app-openpgp.c (get_remaining_tries): Read value[4] not value[1] for chvno==1. 2026-06-09 NIIBE Yutaka <[email protected]> gpg: Fix error propagation in encrypted->compressed->plaintext chain. + commit 91bff8b9fd5e130a3ebf46f0afc6c8ad723ca1e4 * g10/compress.c (do_uncompress): Return an error of input failure. * g10/decrypt-data.c (aead_underflow): Remove modifying an error code, because ->checktag_failed is enough for this. * g10/plaintext.c (handle_plaintext): Pick up an error code from input failure. 2026-06-09 NIIBE Yutaka <[email protected]> Philip Le <[email protected]> gpg: Use partial file on decryption, remove on failure. + commit 8f8b2bdcc3c93f7586ce2c18ddbaff2efe5ba5d3 * g10/options.h (COMPAT_NO_PARTIALFILEGUARD): New. * g10/gpg.c (compatibility_flags_s compatibility_flags): Add COMPAT_NO_PARTIALFILEGUARD. * sm/gpgsm.c (compatibility_flags_s compatibility_flags): Fix the option name. * g10/packet.h (struct pfg, pfg_open_file, pfg_close_file): New. * g10/decrypt-data.c (decrypt_data): Use pfg_open_file, pfg_close_file, instead of get_output_file. Add log_error for MDC failure just like AEAD failure. * g10/plaintext.c (get_output_file): Mofify using PFG. (pfg_open_file, pfg_close_file): New. (handle_plaintext): Use PFG. Add iobuf_error check to ensure aead filter failure is detected correctly. 2026-06-02 NIIBE Yutaka <[email protected]> gpgsm: Use partial file on decryption, remove on failure. + commit ca8633c55edffd9ee46fe80735ee125120e0bc2c * sm/gpgsm.c (main): Prepare .part file and rename on success, remove on failure. * sm/gpgsm.h (COMPAT_NO_PARTIALFILEGUARD): New. tools:gpgconf: Raise an error on parse error. + commit f99e4291200d507f5ac8a73066a2ea259a1d7eb8 * tools/gpgconf-comp.c (change_options_program): Return an error, replacing assertion. scd: Limit the size of data object returned from a device. + commit ab3b9c7709fdd41b37e44632cc1569e85c6d1e6e * scd/apdu.c (send_le, apdu_send_direct): Raise an error of SW_WRONG_LENGTH, when it's too large. 2026-06-02 NIIBE Yutaka <[email protected]> Jakub Jelen <[email protected]> gpg:keygen: Fix setting keyserver_url in key generation. + commit b42f8da77c5a709ea9fd163ad7c4d73ddeee9dba * g10/keygen.c (proc_parameter_file): Save and restore global variable opt.def_keyserver_url. 2026-05-29 Philip Le <[email protected]> gpgsm: Fix regression in gpgsm_verify with expired certificates. + commit 32f56a2732f0ac6204aad946388789cdbb0e26eb * sm/verify.c (gpgsm_verify): Display information about signers with expired certificate. 2026-05-29 Werner Koch <[email protected]> gpg: Improve diagnostics for faulty secret key packets. + commit 91defad97deca5ce1b9cc8e792ae5fe13c201f7a * g10/parse-packet.c (parse_key): Add a note about a mising checksum. 2026-05-26 NIIBE Yutaka <[email protected]> tests:gpgscm: Support signed-char machine. + commit 31c8f42bb30306d2bef3e315730c379a19f0af26 * tests/gpgscm/ffi.c (rl_gets, ffi_schemify_name): Add coercion to unsigned char explicitly. * tests/gpgscm/main.c: Remove unused <ctype.h>. * tests/gpgscm/scheme.c (stricmp, mk_atom, readstrexp) (printslashstring, hash_fn): Add coercion to unsigned char explicitly. (basic_inchar): Add coercion to unsigned char * explicitly. 2026-05-18 Werner Koch <[email protected]> gpgscm: Allow building on systems with MUSL libc. + commit a0d4d936424e945966de9314cbb2765a8819efbf * tests/gpgscm/scheme.c: Include time.h.
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241896): https://lists.openembedded.org/g/openembedded-core/message/241896 Mute This Topic: https://lists.openembedded.org/mt/120422097/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
