CVS commit: pkgsrc/security/gnupg2

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Sep 26 09:47:55 UTC 2026

Modified Files:
        pkgsrc/security/gnupg2: Makefile distinfo

Log Message:
gnupg2: update to 2.5.24.

Noteworthy changes in version 2.5.24 (2026-09-23)
-------------------------------------------------

 * Bug fixes:

   - scd: Fix for regression in 2.5.23 related to the new Nitrokey
     detection.  [T8331]

 Release-info: https://dev.gnupg.org/T8425

Noteworthy changes in version 2.5.23 (2026-09-22)
-------------------------------------------------

 * New and extended features:

   - gpg: New option --allow-9980 to enable the processing of RFC-9980
     specified data structures.  The use of this option is only
     recommended if external policy requirements demand the use of
     these governmental approved specification.  PGP folks requiring
     some PQC resistance should keep on using the standard LibrePGP
     Kyber algorithm introduced 2 years ago.  [rG6803ce215c]

   - gpg: In 9980 mode support PQC encryption using ML-KEM (aka Kyber)
     with X448, X25519, Brainpool, or NIST curves as specified by
     RFC-9980 et al.

   - gpg: In 9980 mode support ED25519 and X25519 as specified by
     RFC-9580 under the names "ietf27" and "ietf27".

   - gpg: Add experimental support for a --compliance=fips mode to use
     GCM for bulk encryption.  [rG05c271f45a]

   - scd: Add Nitrokey 3 to pcsc-shared interference detection.
     [T8331]

 * Bug fixes:

   - gpgsm: Fix an exploitable printf bug when using the debug option
     "--debug x509".  [rGe6d92ff7af]

   - dirmngr: Make the LDAP upload flags also work for KS_SEARCH.
     [T7866]

   - dirmngr: Fix OOB read in DNS CERT record parser.  [T8464]

   - scd: Fix OOB access in DO parsing of faulty cards.  [T8465]

 * Other changes:

   - dirmngr: Add a mitigation for badly configured web key
     directories.  [rGbc7686ad7c]

   - New option --debug-no-libgcrypt for gpg, gpgsm, and agent.  This
     debug option is useful to avoid cluttering other debug output
     with libgcrypt generated debug details.

   - gpg: New --list-options "debug-show-sexp" to print a secret key
     as an s-expression.  [rG1e0261fe50]

 Release-info: https://dev.gnupg.org/T8425


To generate a diff of this commit:
cvs rdiff -u -r1.180 -r1.181 pkgsrc/security/gnupg2/Makefile
cvs rdiff -u -r1.100 -r1.101 pkgsrc/security/gnupg2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnupg2/Makefile
diff -u pkgsrc/security/gnupg2/Makefile:1.180 pkgsrc/security/gnupg2/Makefile:1.181
--- pkgsrc/security/gnupg2/Makefile:1.180       Mon Sep  7 05:19:50 2026
+++ pkgsrc/security/gnupg2/Makefile     Sat Sep 26 09:47:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.180 2026/09/07 05:19:50 adam Exp $
+# $NetBSD: Makefile,v 1.181 2026/09/26 09:47:54 wiz Exp $
 
-DISTNAME=      gnupg-2.5.22
+DISTNAME=      gnupg-2.5.24
 PKGNAME=       ${DISTNAME:S/gnupg-/gnupg2-/}
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GNUPG:=gnupg/}

Index: pkgsrc/security/gnupg2/distinfo
diff -u pkgsrc/security/gnupg2/distinfo:1.100 pkgsrc/security/gnupg2/distinfo:1.101
--- pkgsrc/security/gnupg2/distinfo:1.100       Mon Sep  7 05:19:50 2026
+++ pkgsrc/security/gnupg2/distinfo     Sat Sep 26 09:47:54 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.100 2026/09/07 05:19:50 adam Exp $
+$NetBSD: distinfo,v 1.101 2026/09/26 09:47:54 wiz Exp $
 
-BLAKE2s (gnupg-2.5.22.tar.bz2) = c642f2c49daecf09a6acb4a3faaceca65427f68f7a741a5d558bf369f796ba5a
-SHA512 (gnupg-2.5.22.tar.bz2) = 5ff5834e42009f5741d84dcf25473adb5704ca796e1bd8d1a8ea3216b854864f08504f5ff5279026bab24b5baa255e9bd18e70bc1d4fc8fe293351760ab71231
-Size (gnupg-2.5.22.tar.bz2) = 8363854 bytes
+BLAKE2s (gnupg-2.5.24.tar.bz2) = d1a1c34665c3c4891e12119405a08468c6e51f6087816cdf85535afec22d3804
+SHA512 (gnupg-2.5.24.tar.bz2) = c60b0c105ef710defec5b23d6c1382ae8adabc3207917fb484960b1c37ae7b542da2ece5eafaa5d53fa13485647b52c2d371fe099e5600aba4c84e7d83ceb1df
+Size (gnupg-2.5.24.tar.bz2) = 8431157 bytes
 SHA1 (patch-common_sysutils.c) = 569c12e21172c1521284922244b2f4f361c945d6