[ubuntu/kinetic-proposed] gnupg2 2.2.35-3ubuntu1 (Accepted)

Steve Langasek steve.langasek at ubuntu.com
Tue Aug 16 01:06:15 UTC 2022


gnupg2 (2.2.35-3ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.
  * Dropped changes, included upstream:
    - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
      NOTATION_DATA in g10/cpr.c.

gnupg2 (2.2.35-3) unstable; urgency=high

  * fix security error from large notations (Thanks, Demi Marie Obenour)
    (Closes: #1014157)
  * Standards-Version: bump to 4.6.1 (no changes needed)
  * clean up lintian-overrides

gnupg2 (2.2.35-2) unstable; urgency=medium

  * Only enable wine32 test on i386

gnupg2 (2.2.35-1) unstable; urgency=medium

  * New upstream release.
  * refresh patches.
  * Correct handling of 256-bit Ed25519 secret keys (Closes: #1010171).
  * Building for Windows requires libgpg-error 1.45

gnupg2 (2.2.34-1) unstable; urgency=medium

  * New upstream release
  * Refresh patches.
  * ship gpg-check-pattern.1 from upstream
  * override another pedantic lintian warning

gnupg2 (2.2.27-4) unstable; urgency=medium

  [ Christoph Biedl ]
  * Remove myself from uploaders

  [ Daniel Kahn Gillmor ]
  * Replace Werner Koch's signing key
  * convert to DEP-14 branch name
  * standards-version: bump to 4.6.0 (no changes needed)
  * add upstream metadata
  * gpgv-static: fix up lintian-override
  * d/copyright: update years

Date: Mon, 15 Aug 2022 18:01:56 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnupg2/2.2.35-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 15 Aug 2022 18:01:56 -0700
Source: gnupg2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.2.35-3ubuntu1
Distribution: kinetic
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 1010171 1014157
Changes:
 gnupg2 (2.2.35-3ubuntu1) kinetic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - Drop the gpgv-win32 test
     - Honor http_proxy= environment variables by default in the systemd
       user session dirmngr service.
       (debian/patches/dirmngr-honor-http-proxy.patch)
     - Export GPG_AGENT_INFO in the systemd-environment-generator too.
     - Don't declare diffutils as a test dependency, this package is
       essential so always installed; and the dependency declaration breaks
       cross-arch testing.
   * Dropped changes, included upstream:
     - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
       NOTATION_DATA in g10/cpr.c.
 .
 gnupg2 (2.2.35-3) unstable; urgency=high
 .
   * fix security error from large notations (Thanks, Demi Marie Obenour)
     (Closes: #1014157)
   * Standards-Version: bump to 4.6.1 (no changes needed)
   * clean up lintian-overrides
 .
 gnupg2 (2.2.35-2) unstable; urgency=medium
 .
   * Only enable wine32 test on i386
 .
 gnupg2 (2.2.35-1) unstable; urgency=medium
 .
   * New upstream release.
   * refresh patches.
   * Correct handling of 256-bit Ed25519 secret keys (Closes: #1010171).
   * Building for Windows requires libgpg-error 1.45
 .
 gnupg2 (2.2.34-1) unstable; urgency=medium
 .
   * New upstream release
   * Refresh patches.
   * ship gpg-check-pattern.1 from upstream
   * override another pedantic lintian warning
 .
 gnupg2 (2.2.27-4) unstable; urgency=medium
 .
   [ Christoph Biedl ]
   * Remove myself from uploaders
 .
   [ Daniel Kahn Gillmor ]
   * Replace Werner Koch's signing key
   * convert to DEP-14 branch name
   * standards-version: bump to 4.6.0 (no changes needed)
   * add upstream metadata
   * gpgv-static: fix up lintian-override
   * d/copyright: update years
Checksums-Sha1:
 0bca8f6621528aa6e2457a7f4a430267ab6755df 3949 gnupg2_2.2.35-3ubuntu1.dsc
 25449f0417ff0011036b8e48217901222aef7c44 7262687 gnupg2_2.2.35.orig.tar.bz2
 7f32403fab4a95e359b2d78f4c080083b4deeff8 228 gnupg2_2.2.35.orig.tar.bz2.asc
 12112cfbe9b2be7d7ed3d410a901a928abc294ed 65224 gnupg2_2.2.35-3ubuntu1.debian.tar.xz
 fe6d0477a4b8842ffc548490ff573dbde3c87524 9725 gnupg2_2.2.35-3ubuntu1_source.buildinfo
Checksums-Sha256:
 fe39398b66136f03d5f375e62bd2fe731f4bc48f865fe05d21bab7817fc962d4 3949 gnupg2_2.2.35-3ubuntu1.dsc
 340bc255938971e6e729b3d9956fa2ef4db8215d77693bf300df2bb302498690 7262687 gnupg2_2.2.35.orig.tar.bz2
 433176d7c36c03fcef5888248fed9209ebe87246b996e263c3b0f923ba99e137 228 gnupg2_2.2.35.orig.tar.bz2.asc
 1975b64c4d3ccb14afd7dece1eef8629db52025200fe9319babb9ffa40e88220 65224 gnupg2_2.2.35-3ubuntu1.debian.tar.xz
 776d2a08b69491512e4acbad4c0f48463bd9e7244b9987ccfe09bf76584b0174 9725 gnupg2_2.2.35-3ubuntu1_source.buildinfo
Files:
 707c9e43a362eb6db5e33fe715c7a4e6 3949 utils optional gnupg2_2.2.35-3ubuntu1.dsc
 be226268a90b4e31379a41f023aaacb6 7262687 utils optional gnupg2_2.2.35.orig.tar.bz2
 7f0bfbbbdf41e30a048adf09a5604343 228 utils optional gnupg2_2.2.35.orig.tar.bz2.asc
 cac9d6ba29caf07441c3f97577233cb9 65224 utils optional gnupg2_2.2.35-3ubuntu1.debian.tar.xz
 482644203db8379cadce9dac26cb7a9b 9725 utils optional gnupg2_2.2.35-3ubuntu1_source.buildinfo
Original-Maintainer: Debian GnuPG Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>


More information about the kinetic-changes mailing list