dgit.raspbian.org Git - gnupg2.git/commit

gnupg2 (2.2.12-1+deb10u1) buster; urgency=medium

  * drop unneeded patch for printing revocation certificates
  * backport bugfix and stability patches from upstream 2.2.13
  * backport bugfix and stability patches from upstream 2.2.14
  * backport documentation, stability, ssh, and WKD patches from upstream 2.2.15
  * backport documentation and bugfix patches from upstream 2.2.16
  * import bugfixes and cleanup around secret key handling from 2.2.14
  * backport bugfixes, documentation, WKD, and keyserver fixes from 2.2.17
  * import efficiency and security fixes from upstream STABLE-BRANCH-2-2
  * avoid using SKS pool CA unless the keyserver is hkps.pool.sks-keyservers.net
  * drop import-clean from default keyserver options, to avoid data loss
  * use keys.openpgp.org as the default keyserver
  * enable merging certificate updates even if update has no user ID
  * update Vcs-Git: to point to debian/buster branch
  * Adopt migrate-pubring-from-classic-gpg robustness fixes (Closes: #931385)
  * add new CI test: debian/tests/simple-tests
  * debian/tests/gpgv-win32: make arch-specific (Closes: #905563)

[dgit import unpatched gnupg2 2.2.12-1+deb10u1]

author	Daniel Kahn Gillmor <dkg@fifthhorseman.net>
	Thu, 22 Aug 2019 19:11:59 +0000 (20:11 +0100)
committer	Daniel Kahn Gillmor <dkg@fifthhorseman.net>
	Thu, 22 Aug 2019 19:11:59 +0000 (20:11 +0100)
commit	faf7e9dcc2e45653b6f9634d86dfbab86e1819df
tree	f5cc08b741523fe60b91de2ed8ab2a6e438aee14	tree \| snapshot
parent	b8eea2e5825727d5a46bd8caf7a428c27db79c0b	commit \| diff
parent	d8f8c83cdd79b4bb29116d8cff1f51799dfe8252	commit \| diff

debian/NEWS	\|	\|	blob
debian/Xsession.d/90gpg-agent	\|	\|	blob
debian/changelog	\|	\|	blob
debian/clean	\|	\|	blob
debian/compat	\|	\|	blob
debian/control	\|	\|	blob
debian/copyright	\|	\|	blob
debian/dirmngr.NEWS	\|	\|	blob
debian/dirmngr.README.Debian	\|	\|	blob
debian/dirmngr.docs	\|	\|	blob
debian/dirmngr.install	\|	\|	blob
debian/dirmngr.links	\|	\|	blob
debian/dirmngr.maintscript	\|	\|	blob
debian/dirmngr.manpages	\|	\|	blob
debian/gbp.conf	\|	\|	blob
debian/gnupg-l10n.install	\|	\|	blob
debian/gnupg-utils.install	\|	\|	blob
debian/gnupg-utils.manpages	\|	\|	blob
debian/gnupg.README.Debian	\|	\|	blob
debian/gnupg.docs	\|	\|	blob
debian/gnupg.info	\|	\|	blob
debian/gnupg2.links	\|	\|	blob
debian/gpg-agent.NEWS	\|	\|	blob
debian/gpg-agent.README.Debian	\|	\|	blob
debian/gpg-agent.examples	\|	\|	blob
debian/gpg-agent.install	\|	\|	blob
debian/gpg-agent.links	\|	\|	blob
debian/gpg-agent.logcheck.ignore.server	\|	\|	blob
debian/gpg-agent.manpages	\|	\|	blob
debian/gpg-check-pattern.1	\|	\|	blob
debian/gpg-wks-client.1	\|	\|	blob
debian/gpg-wks-client.install	\|	\|	blob
debian/gpg-wks-client.manpages	\|	\|	blob
debian/gpg-wks-server.1	\|	\|	blob
debian/gpg-wks-server.install	\|	\|	blob
debian/gpg-wks-server.manpages	\|	\|	blob
debian/gpg-zip.1	\|	\|	blob
debian/gpg.install	\|	\|	blob
debian/gpg.manpages	\|	\|	blob
debian/gpgcompose.1	\|	\|	blob
debian/gpgconf.examples	\|	\|	blob
debian/gpgconf.install	\|	\|	blob
debian/gpgconf.manpages	\|	\|	blob
debian/gpgsm.install	\|	\|	blob
debian/gpgsm.manpages	\|	\|	blob
debian/gpgsplit.1	\|	\|	blob
debian/gpgv-static.1	\|	\|	blob
debian/gpgv-static.install	\|	\|	blob
debian/gpgv-static.lintian-overrides	\|	\|	blob
debian/gpgv-static.manpages	\|	\|	blob
debian/gpgv-udeb.install	\|	\|	blob
debian/gpgv-win32.install	\|	\|	blob
debian/gpgv.install	\|	\|	blob
debian/gpgv.manpages	\|	\|	blob
debian/gpgv2.links	\|	\|	blob
debian/kbxutil.1	\|	\|	blob
debian/lspgpot.1	\|	\|	blob
debian/migrate-pubring-from-classic-gpg	\|	\|	blob
debian/migrate-pubring-from-classic-gpg.1	\|	\|	blob
debian/org.gnupg.scdaemon.metainfo.xml	\|	\|	blob
debian/package-dependencies.dot	\|	\|	blob
debian/patches/Make-gpg-zip-use-tar-from-PATH.patch	\|	\|	blob
debian/patches/block-ptrace-on-secret-daemons/Avoid-simple-memory-dumps-via-ptrace.patch	\|	\|	blob
debian/patches/debian-packaging/avoid-beta-warning.patch	\|	\|	blob
debian/patches/debian-packaging/avoid-regenerating-defsincdate-use-shipped-file.patch	\|	\|	blob
debian/patches/dirmngr-idling/dirmngr-Avoid-automatically-checking-upstream-swdb.patch	\|	\|	blob
debian/patches/dirmngr-idling/dirmngr-Avoid-need-for-hkp-housekeeping.patch	\|	\|	blob
debian/patches/dirmngr-idling/dirmngr-hkp-Avoid-potential-race-condition-when-some.patch	\|	\|	blob
debian/patches/fix-spelling.patch	\|	\|	blob
debian/patches/from-2.2.13/Silence-compiler-warnings-new-with-gcc-8.patch	\|	\|	blob
debian/patches/from-2.2.13/agent-Clear-bogus-pinentry-cache-when-it-causes-an-error.patch	\|	\|	blob
debian/patches/from-2.2.13/dirmngr-Fix-initialization-of-assuan-s-nPth-hook.patch	\|	\|	blob
debian/patches/from-2.2.13/doc-Mark-keyserver-options-timeout-and-http-proxy-as-obso.patch	\|	\|	blob
debian/patches/from-2.2.13/gpg-Allow-generating-Ed25519-key-from-an-existing-key.patch	\|	\|	blob
debian/patches/from-2.2.13/gpg-Emit-an-ERROR-status-if-no-key-was-found-with-list-ke.patch	\|	\|	blob
debian/patches/from-2.2.13/gpg-Stop-early-when-trying-to-create-a-primary-Elgamal-ke.patch	\|	\|	blob
debian/patches/from-2.2.13/wks-Do-not-use-compression-for-the-encrypted-data.patch	\|	\|	blob
debian/patches/from-2.2.14/agent-Fix-for-suggested-Libgcrypt-use.patch	\|	\|	blob
debian/patches/from-2.2.14/agent-Support-mode-ssh-option-for-CLEAR_PASSPHRASE.patch	\|	\|	blob
debian/patches/from-2.2.14/common-Fix-gnupg_wait_processes.patch	\|	\|	blob
debian/patches/from-2.2.14/dirmngr-Add-CSRF-protection-exception-for-protonmail.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-Allow-import-of-PGP-desktop-exported-secret-keys.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-Avoid-importing-secret-keys-if-the-keyblock-is-not-va.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-Do-not-bail-out-on-v5-keys-in-the-local-keyring.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-During-secret-key-import-print-sec-instead-of-pub.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-Fix-comparison.patch	\|	\|	blob
debian/patches/from-2.2.14/gpg-Make-invalid-primary-key-algos-obvious-in-key-listing.patch	\|	\|	blob
debian/patches/from-2.2.14/gpgscm-Build-well-even-if-NDEBUG-defined.patch	\|	\|	blob
debian/patches/from-2.2.14/gpgsm-default-to-3072-bit-keys.patch	\|	\|	blob
debian/patches/from-2.2.14/gpgv-Improve-documentation-for-keyring-choices.patch	\|	\|	blob
debian/patches/from-2.2.14/scd-Distinguish-cancel-by-user-and-protocol-error.patch	\|	\|	blob
debian/patches/from-2.2.14/sm-Don-t-mark-a-cert-as-de-vs-compliant-if-it-leads-to-SH.patch	\|	\|	blob
debian/patches/from-2.2.14/sm-Print-Yubikey-attestation-extensions-with-dump-cert.patch	\|	\|	blob
debian/patches/from-2.2.14/tests-Add-disable-scdaemon-in-gpg-agent.conf.patch	\|	\|	blob
debian/patches/from-2.2.14/tests-Add-sample-secret-key-w-o-binding-signatures.patch	\|	\|	blob
debian/patches/from-2.2.15/agent-Allow-other-ssh-fingerprint-algos-in-KEYINFO.patch	\|	\|	blob
debian/patches/from-2.2.15/doc-Clarify-option-no-keyring.patch	\|	\|	blob
debian/patches/from-2.2.15/doc-fix-formatting-error.patch	\|	\|	blob
debian/patches/from-2.2.15/sm-Allow-decryption-even-if-expired-other-keys-are-config.patch	\|	\|	blob
debian/patches/from-2.2.15/wkd-New-command-print-wkd-hash-for-gpg-wks-client.patch	\|	\|	blob
debian/patches/from-2.2.15/wkd-New-command-print-wkd-url-for-gpg-wks-client.patch	\|	\|	blob
debian/patches/from-2.2.16/agent-For-SSH-key-don-t-put-NUL-byte-at-the-end.patch	\|	\|	blob
debian/patches/from-2.2.16/agent-Stop-scdaemon-after-reload-when-disable_scdaemon.patch	\|	\|	blob
debian/patches/from-2.2.16/agent-correct-length-for-uri-and-comment-on-64-bit-big-en.patch	\|	\|	blob
debian/patches/from-2.2.16/dirmngr-Add-a-CSRF-expection-for-pm.me.patch	\|	\|	blob
debian/patches/from-2.2.16/dirmngr-Allow-for-other-hash-algorithms-than-SHA-1-in-OCS.patch	\|	\|	blob
debian/patches/from-2.2.16/dirmngr-Better-error-code-for-http-status-413.patch	\|	\|	blob
debian/patches/from-2.2.16/doc-Do-not-mention-gpg-s-deprecated-keyserver-option.patch	\|	\|	blob
debian/patches/from-2.2.16/doc-Minor-doc-fix-to-dirmngr.patch	\|	\|	blob
debian/patches/from-2.2.16/doc-Minor-edit-for-a-gpg-option.patch	\|	\|	blob
debian/patches/from-2.2.16/doc-correct-documentation-for-gpgconf-kill.patch	\|	\|	blob
debian/patches/from-2.2.16/g10-Fix-double-free-when-locating-by-mbox.patch	\|	\|	blob
debian/patches/from-2.2.16/g10-Fix-possible-null-dereference.patch	\|	\|	blob
debian/patches/from-2.2.16/g10-Fix-symmetric-cipher-algo-constant-for-ECDH.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Accept-also-armored-data-from-the-WKD.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Allow-deletion-of-subkeys-with-delete-secret-key.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Change-update_keysig_packet-to-replace-SHA-1-by-SHA-2.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Do-not-allow-creation-of-user-ids-larger-than-our-par.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Do-not-bail-on-an-invalid-packet-in-the-local-keyring.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Do-not-delete-any-keys-if-dry-run-is-passed.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Do-not-print-a-hint-to-use-the-deprecated-keyserver-o.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Don-t-use-EdDSA-algo-ID-for-ECDSA-curves.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Set-a-limit-of-5-to-the-number-of-keys-imported-from-.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-Use-just-the-addrspec-from-the-Signer-s-UID.patch	\|	\|	blob
debian/patches/from-2.2.16/gpg-enable-OpenPGP-export-of-cleartext-keys-with-comments.patch	\|	\|	blob
debian/patches/from-2.2.16/gpgconf-Before-launch-check-that-the-config-file-is-fine.patch	\|	\|	blob
debian/patches/from-2.2.16/gpgconf-Support-homedir-for-launch.patch	\|	\|	blob
debian/patches/from-2.2.17/Mention-sender-in-documentation.patch	\|	\|	blob
debian/patches/from-2.2.17/Return-better-error-code-for-some-getinfo-IPC-commands.patch	\|	\|	blob
debian/patches/from-2.2.17/dirmngr-Avoid-endless-loop-in-case-of-HTTP-error-503.patch	\|	\|	blob
debian/patches/from-2.2.17/dirmngr-Do-not-rewrite-the-redirection-for-the-openpgpkey.patch	\|	\|	blob
debian/patches/from-2.2.17/dirmngr-Support-the-new-WKD-draft-with-the-openpgpkey-sub.patch	\|	\|	blob
debian/patches/from-2.2.17/dirmngr-fix-handling-of-HTTPS-redirections-during-HKP.patch	\|	\|	blob
debian/patches/from-2.2.17/doc-wks.texi-fix-typo.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-Add-self-sigs-only-and-import-clean-to-the-keyserver-.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-Do-not-try-the-import-fallback-if-the-options-are-alr.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-Fallback-to-import-with-self-sigs-only-on-too-large-k.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-Fix-regression-in-option-self-sigs-only.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-Make-read_block-in-import.c-more-flexible.patch	\|	\|	blob
debian/patches/from-2.2.17/gpg-New-import-and-keyserver-option-self-sigs-only.patch	\|	\|	blob
debian/patches/from-2.2.17/spelling-Fix-synchronize.patch	\|	\|	blob
debian/patches/from-2.2.17/tools-gpgconf-Killing-order-is-children-first.patch	\|	\|	blob
debian/patches/from-2.2.18-prerelease/dirmngr-Don-t-add-system-CAs-for-SKS-HKPS-pool.patch	\|	\|	blob
debian/patches/from-2.2.18-prerelease/gpg-Fix-keyring-retrieval.patch	\|	\|	blob
debian/patches/from-2.2.18-prerelease/gpg-Improve-import-slowness.patch	\|	\|	blob
debian/patches/from-master/agent-Fix-cancellation-handling-for-scdaemon.patch	\|	\|	blob
debian/patches/from-master/gpg-default-to-3072-bit-RSA-keys.patch	\|	\|	blob
debian/patches/from-master/gpg-default-to-AES-256.patch	\|	\|	blob
debian/patches/gpg-agent-idling/agent-Allow-threads-to-interrupt-main-select-loop-wi.patch	\|	\|	blob
debian/patches/gpg-agent-idling/agent-Avoid-scheduled-checks-on-socket-when-inotify-.patch	\|	\|	blob
debian/patches/gpg-agent-idling/agent-Avoid-tight-timer-tick-when-possible.patch	\|	\|	blob
debian/patches/gpg-agent-idling/agent-Create-framework-of-scheduled-timers.patch	\|	\|	blob
debian/patches/import-merge-without-userid/gpg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch	\|	\|	blob
debian/patches/import-merge-without-userid/gpg-allow-import-of-previously-known-keys-even-without-UI.patch	\|	\|	blob
debian/patches/import-merge-without-userid/tests-add-test-cases-for-import-without-uid.patch	\|	\|	blob
debian/patches/keyserver-cleanup/Use-hkps-keys.openpgp.org-as-the-default-keyserver.patch	\|	\|	blob
debian/patches/keyserver-cleanup/dirmngr-Only-use-SKS-pool-CA-for-SKS-pool.patch	\|	\|	blob
debian/patches/keyserver-cleanup/gpg-drop-import-clean-from-default-keyserver-import-optio.patch	\|	\|	blob
debian/patches/series	\|	\|	blob
debian/patches/update-defaults/gpg-Default-to-SHA-512-for-all-signature-types-on-RS.patch	\|	\|	blob
debian/patches/update-defaults/gpg-Prefer-SHA-512-and-SHA-384-in-personal-digest.patch	\|	\|	blob
debian/rules	\|	\|	blob
debian/scdaemon.examples	\|	\|	blob
debian/scdaemon.install	\|	\|	blob
debian/scdaemon.manpages	\|	\|	blob
debian/scdaemon.udev	\|	\|	blob
debian/simplified-package-dependencies.dot	\|	\|	blob
debian/source/format	\|	\|	blob
debian/source/lintian-overrides	\|	\|	blob
debian/systemd-environment-generator/90gpg-agent	\|	\|	blob
debian/tests/control	\|	\|	blob
debian/tests/gpgv-win32	\|	\|	blob
debian/tests/migration	\|	\|	blob
debian/tests/simple-tests	\|	\|	blob
debian/upstream/signing-key.asc	\|	\|	blob
debian/watch	\|	\|	blob