The following reply was made to PR pkg/35940; it has been noted by GNATS.

From: Lubomir Sedlacik <salo@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/35940 CVS commit: [pkgsrc-2006Q4] pkgsrc/security/gnupg
Date: Fri,  9 Mar 2007 16:21:35 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	salo
 Date:		Fri Mar  9 16:21:35 UTC 2007
 
 Modified Files:
 	pkgsrc/security/gnupg [pkgsrc-2006Q4]: Makefile PLIST distinfo
 
 Log Message:
 Pullup ticket 2047 - requested by drochner
 security update for gnupg
 
 Revisions pulled up:
 - pkgsrc/security/gnupg/Makefile				1.94
 - pkgsrc/security/gnupg/PLIST					1.21
 - pkgsrc/security/gnupg/distinfo				1.46
 
    Module Name:		pkgsrc
    Committed By:	drochner
    Date:		Wed Mar  7 11:31:24 UTC 2007
 
    Modified Files:
    	pkgsrc/security/gnupg: Makefile PLIST distinfo
 
    Log Message:
    update to 1.4.7, from Christian Gall per PR pkg/35940
    This fixes a security problem which is rather an application issue:
    The user wasn't notified about additional text (not covered by the
    signature) unless the --status-fd flag is used.
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.93 -r1.93.2.1 pkgsrc/security/gnupg/Makefile
 cvs rdiff -r1.20 -r1.20.2.1 pkgsrc/security/gnupg/PLIST
 cvs rdiff -r1.45 -r1.45.2.1 pkgsrc/security/gnupg/distinfo
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.