[pkgsrc/trunk]: pkgsrc/security/gnupg Update gnupg to 1.4.21

[maya <maya%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/0cfb5770f90a
branches:  trunk
changeset: 351251:0cfb5770f90a
user:      maya <maya%pkgsrc.org@localhost>
date:      Wed Aug 17 23:05:19 2016 +0000

description:
Update gnupg to 1.4.21

Changelog:
2016-08-17  Werner Koch  <wk%gnupg.org@localhost>

        Release 1.4.21.

        gpg: Add dummy option --with-subkey-fingerprint.
        * g10/gpg.c (opts): Add dummy option.

        build: Create a swdb file during "make distcheck".
        * Makefile.am (distcheck-hook): New.

2016-08-17  Ineiev  <ineiev%gnu.org@localhost>

        po: Update Russian translation.

2016-08-17  Werner Koch  <wk%gnupg.org@localhost>

        random: Hash continuous areas in the csprng pool.
        * cipher/random.c (mix_pool): Store the first hash at the end of the
        pool.

        cipher: Improve readability by using a macro.
        * cipher/random.c (mix_pool): Use DIGESTLEN instead of 20.

2016-08-09  Daniel Kahn Gillmor  <dkg%fifthhorseman.net@localhost>

        gpg: Avoid publishing the GnuPG version by default.
        * g10/gpg.c (main): initialize opt.emit_version to 0
        * doc/gpg.texi: document different default for --emit-version

2016-08-04  Daniel Kahn Gillmor  <dkg%fifthhorseman.net@localhost>

        Clean up "allow to"
        * README, cipher/cipher.c, cipher/pubkey.c, doc/gpg.texi: replace
          "allow to" with clearer text

        In standard English, the normal construction is "${XXX} allows ${YYY}
        to" -- that is, the subject (${XXX}) of the sentence is allowing the
        object (${YYY}) to do something.  When the object is missing, the
        phrasing sounds awkward, even if the object is implied by context.
        There's almost always a better construction that isn't as awkward.

        These changes should make the language a bit clearer.

        Fix spelling: "occured" should be "occurred"
        * checks/armor.test, cipher/des.c, g10/ccid-driver.c, g10/pkclist.c,
          util/regcomp.c, util/regex_internal.c: correct the spelling of
          "occured" to "occurred"

2016-08-04  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Fix checking key for signature validation.
        * g10/sig-check.c (signature_check2): Not only subkey, but also primary
        key should have flags.valid=1.

2016-08-03  Justus Winter  <justus%g10code.com@localhost>

        Partially revert "g10: Fix another race condition for trustdb access."
        This amends db246f8b which accidentally included the compiled
        translation files.

2016-07-09  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        gpgv: Tweak default options for extra security.
        * g10/gpgv.c (main): Set opt.no_sig _cache, so that it doesn't depend on
        cached status.  Similarly, set opt.flags.require_cross_cert for backsig
        validation for subkey signature.

2016-07-06  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Fix keysize with --expert.
        * g10/keygen.c (ask_keysize): It's 768 only for DSA.

2016-06-28  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Fix --list-packets.
        * g10/gpg.c (main): Call set_packet_list_mode after assignment of
        opt.list_packets.
        * g10/mainproc.c (do_proc_packets): Don't stop processing with
        --list-packets as the comment says.
        * g10/options.h (list_packets): Fix the comment.
        * g10/parse-packet.c: Fix the condition for opt.list_packets.

2016-06-15  Niibe Yutaka  <gniibe%fsij.org@localhost>

        g10: Fix another race condition for trustdb access.
        * g10/tdbio.c (create_version_record): Call create_hashtable to always
        make hashtable, together with the version record.
        (get_trusthashrec): Remove call to create_hashtable.

2016-02-12  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Make sure to have the directory for trustdb.
        * g10/tdbio.c (tdbio_set_dbname): Return earlier if !CREATE.  Check
        the directory and create it if none before calling take_write_lock.

2016-02-01  Werner Koch  <wk%gnupg.org@localhost>

        Fix possible sign extension problem with newer compilers.
        * cipher/des.c (READ_64BIT_DATA): Cast to u32 before shifting by 24.
        * cipher/blowfish.c (do_encrypt_block): Ditto.
        (do_decrypt_block): Ditto.
        * cipher/camellia.c (CAMELLIA_RR8): Ditto.
        * cipher/cast5.c (do_encrypt_block): Ditto.
        (do_decrypt_block): Ditto.
        (do_cast_setkey): Ditto.
        * cipher/twofish.c (INPACK): Ditto.
        * util/iobuf.c (block_filter): Ditto.

2016-01-26  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        g10: Fix iobuf API of filter function for alignment.
        * include/iobuf.h (struct iobuf_struct): Remove DESC.
        * util/iobuf.c (iobuf_desc): New.
        (print_chain, iobuf_close, iobuf_open, iobuf_fdopen, iobuf_sockopen)
        (iobuf_create, iobuf_append, iobuf_openrw, iobuf_ioctl)
        (iobuf_push_filter2, pop_filter, underflow): Use iobuf_desc.
        (file_filter, sock_filter, block_filter): Fill the description.
        * g10/armor.c, g10/cipher.c, g10/compress-bz2.c, g10/compress.c,
        g10/encode.c, g10/encr-data.c, g10/mdfilter.c, g10/pipemode.c,
        g10/progress.c, g10/textfilter.c: Likewise.

2016-01-15  Werner Koch  <wk%gnupg.org@localhost>

        Fix possible AIX problem with sysconf in rndunix.
        * cipher/rndunix.c [HAVE_STDINT_H]: Include stdint.h.
        (start_gatherer): Detect misbehaving sysconf.

2016-01-13  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        Fix to support git worktree.
        * Makefile.am: Use -e for testing .git.

2015-12-21  NIIBE Yutaka  <gniibe%fsij.org@localhost>

        po: Update Japanese translation.

diffstat:

 security/gnupg/Makefile |   5 ++---
 security/gnupg/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (29 lines):

diff -r 253eb7c2b9e9 -r 0cfb5770f90a security/gnupg/Makefile
--- a/security/gnupg/Makefile   Wed Aug 17 22:00:48 2016 +0000
+++ b/security/gnupg/Makefile   Wed Aug 17 23:05:19 2016 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.133 2016/03/05 11:29:20 jperkin Exp $
+# $NetBSD: Makefile,v 1.134 2016/08/17 23:05:19 maya Exp $
 
-DISTNAME=      gnupg-1.4.20
-PKGREVISION=   1
+DISTNAME=      gnupg-1.4.21
 CATEGORIES=    security
 MASTER_SITES=  ftp://ftp.gnupg.org/gcrypt/gnupg/ \
                http://gd.tuwien.ac.at/privacy/gnupg/gnupg/ \
diff -r 253eb7c2b9e9 -r 0cfb5770f90a security/gnupg/distinfo
--- a/security/gnupg/distinfo   Wed Aug 17 22:00:48 2016 +0000
+++ b/security/gnupg/distinfo   Wed Aug 17 23:05:19 2016 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.69 2015/12/22 20:55:41 ryoon Exp $
+$NetBSD: distinfo,v 1.70 2016/08/17 23:05:19 maya Exp $
 
-SHA1 (gnupg-1.4.20.tar.bz2) = cbc9d960e3d8488c32675019a79fbfbf8680387e
-RMD160 (gnupg-1.4.20.tar.bz2) = 1bc94104238019e557b8362eeaab298bd8b17750
-SHA512 (gnupg-1.4.20.tar.bz2) = 8a66d5a45dcf0508601452061eb1965c3c56c56f0e5ded00b7f54c6104de0a305c1d526abd37be2f55cd9bde79600d9cfaf60536af77ff733d778ace5fcd9dad
-Size (gnupg-1.4.20.tar.bz2) = 3692881 bytes
+SHA1 (gnupg-1.4.21.tar.bz2) = e3bdb585026f752ae91360f45c28e76e4a15d338
+RMD160 (gnupg-1.4.21.tar.bz2) = 082b2759497ea470093bf856d72d5430711b6db9
+SHA512 (gnupg-1.4.21.tar.bz2) = 619e0fbc10310c7e55d129027e2945791fe91a0884b1d6f53acb4b2e380d1c6e71d1a516a59876182c5c70a4227d44a74ceda018c343b5291fa9a5d6de77c984
+Size (gnupg-1.4.21.tar.bz2) = 3689305 bytes
 SHA1 (patch-ab) = 24e200a04f8f31e53e22dc80ed079570cb5de8d8