CVS commit: pkgsrc/security/gnupg2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jul 10 09:28:24 UTC 2019

Modified Files:
        pkgsrc/security/gnupg2: Makefile distinfo

Log Message:
gnupg2: updated to 2.2.17

Noteworthy changes in version 2.2.17:
* gpg: Ignore all key-signatures received from keyservers.  This
  change is required to mitigate a DoS due to keys flooded with
  faked key-signatures.  The old behaviour can be achieved by adding
    keyserver-options no-self-sigs-only,no-import-clean
  to your gpg.conf.
* gpg: If an imported keyblocks is too large to be stored in the
  keybox (pubring.kbx) do not error out but fallback to an import
  using the options "self-sigs-only,import-clean".
* gpg: New command --locate-external-key which can be used to
  refresh keys from the Web Key Directory or via other methods
  configured with --auto-key-locate.
* gpg: New import option "self-sigs-only".
* gpg: In --auto-key-retrieve prefer WKD over keyservers.
* dirmngr: Support the "openpgpkey" subdomain feature from
  draft-koch-openpgp-webkey-service-07.
* dirmngr: Add an exception for the "openpgpkey" subdomain to the
  CSRF protection.
* dirmngr: Fix endless loop due to http errors 503 and 504.
* dirmngr: Fix TLS bug during redirection of HKP requests.
* gpgconf: Fix a race condition when killing components.


To generate a diff of this commit:
cvs rdiff -u -r1.103 -r1.104 pkgsrc/security/gnupg2/Makefile
cvs rdiff -u -r1.56 -r1.57 pkgsrc/security/gnupg2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnupg2/Makefile
diff -u pkgsrc/security/gnupg2/Makefile:1.103 pkgsrc/security/gnupg2/Makefile:1.104
--- pkgsrc/security/gnupg2/Makefile:1.103       Sun Jun  2 09:29:09 2019
+++ pkgsrc/security/gnupg2/Makefile     Wed Jul 10 09:28:24 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.103 2019/06/02 09:29:09 adam Exp $
+# $NetBSD: Makefile,v 1.104 2019/07/10 09:28:24 adam Exp $
 
-DISTNAME=      gnupg-2.2.16
+DISTNAME=      gnupg-2.2.17
 PKGNAME=       ${DISTNAME:S/gnupg-/gnupg2-/}
 CATEGORIES=    security
 MASTER_SITES=  ftp://ftp.gnupg.org/gcrypt/gnupg/

Index: pkgsrc/security/gnupg2/distinfo
diff -u pkgsrc/security/gnupg2/distinfo:1.56 pkgsrc/security/gnupg2/distinfo:1.57
--- pkgsrc/security/gnupg2/distinfo:1.56        Sun Jun  2 09:29:09 2019
+++ pkgsrc/security/gnupg2/distinfo     Wed Jul 10 09:28:24 2019
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.56 2019/06/02 09:29:09 adam Exp $
+$NetBSD: distinfo,v 1.57 2019/07/10 09:28:24 adam Exp $
 
-SHA1 (gnupg-2.2.16.tar.bz2) = f956c8cebee3a6ddb2ce6e6e058d474d056dd9e0
-RMD160 (gnupg-2.2.16.tar.bz2) = 0c5107bbc6fa8e76e9dfbbbab7a59732c552b7ed
-SHA512 (gnupg-2.2.16.tar.bz2) = 0e0040905cc4d1d9d29e184cfeda520b43990e4ec459212537c0ce6092de987157e05b1d1a3022398d9b3cbaeea0f58a7e686745f96933e5ac26be4229162247
-Size (gnupg-2.2.16.tar.bz2) = 6699113 bytes
+SHA1 (gnupg-2.2.17.tar.bz2) = 12c1cee8871c03f0315fc8f27876364b75c95b12
+RMD160 (gnupg-2.2.17.tar.bz2) = 13ad8e3e216d8c7ff6786329d8c15627ed2b9af2
+SHA512 (gnupg-2.2.17.tar.bz2) = a3cd094addac62b4b4ec1683005a2bec761ea2aacf6daf904316b1819f4f6a41f256a8d9452cf28cad71b3e68228465baa27ae0eb1fa734fa91542ef0f159c5d
+Size (gnupg-2.2.17.tar.bz2) = 6717554 bytes