[Pkg-gnupg-commit] [gnupg2] annotated tag debian/2.1.16-1 created (now 4d9658a)

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Nov 21 06:32:17 UTC 2016


This is an automated email from the git hooks/post-receive script.

dkg pushed a change to annotated tag debian/2.1.16-1
in repository gnupg2.

        at  4d9658a   (tag)
   tagging  626693bd42c6afa7e8abeef6d51f460e6becc75d (commit)
  replaces  upstream/2.1.16
 tagged by  Daniel Kahn Gillmor
        on  Mon Nov 21 01:22:32 2016 -0500

- Log -----------------------------------------------------------------
gnupg2 Debian release 2.1.16-1
-----BEGIN PGP SIGNATURE-----

iQKqBAABCgCUFiEE7bLnT1b88rZyl7c1JOz/Wv9oNwoFAlgykqhfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEVE
QjJFNzRGNTZGQ0YyQjY3Mjk3QjczNTI0RUNGRjVBRkY2ODM3MEEWHGRrZ0BmaWZ0
aGhvcnNlbWFuLm5ldAAKCRAk7P9a/2g3CoFuEACl6KiChOk0kj99ay8oYWk3u0W8
GPrnDS2sB6D8GKJbCb9WW1qK5zk4GpwCBquIzQWFbbfMdGKLJfrwKD0SJtH9PNL8
b1jC7qHJPv71gAy4Qr/18KGG+nsymmKnu2l5VZ1Jf9lcfiMIDsatYibn+zmq8gN/
5KQaXghWGkVsiRH/LTbfeqO4aIKPuynMwGtaaLgAD9LTurcPNAkyswjgllULsWKF
kttzD7zxKnh7KIo2fUdJHUR42BM46if0p4QflCagWKOb0qjtVqhgjos52858/6og
7OkLGdJgfPeXTRU8u8oIlkuN+84t4AIVYGNRp66azEJURDCG3ltqLt4sAJose4Er
2nq73O8Q70bf307/g3nMJvmWhef6xVbJ9S4Z4fgKv7vlr0/8TKik48vgu8LQ6nQx
FVZ5Uk3wVfj/0rwrjXWr3rY41sCEwK7ozOD9rQjhurKEqtBz1Dc8xE4/3r0eD2mr
3iiLeBaqLCCPgU7HORzgFVwE3YfzLx40BRpYvOej3e6RFVcZPguCnYtdtxirys7g
3gjDUnw7mIeefgYkVIHe2Wkdk05TG2K31deRDgK3e21RD4OWbPmwm1O1Li7UzA2V
ZxM8DjJUoquz+FpXp2XORQanPvo0esSgPEQn8UMy/geXu8uKBDfWAONCNMrj9ASa
gtGwWolaYQoQxb1XVg==
=zgf8
-----END PGP SIGNATURE-----

Daniel Kahn Gillmor (327):
      Fix broken generation of rsa and dsa keys.
      ignore emacs turds in debian/
      update Vcs fields
      move package to group maintenance
      wrap-and-sort cleanup of debian/*
      prepare release
      use pristine-tar
      starting experimental branch for 2.1
      Imported Upstream version 2.1.0~beta783
      update build-deps
      refresh renaming patch for 2.1
      prepare 2.1 beta upload to unstable
      switch from pth to npth
      pcsc-wrapper dropped by upstream
      keyserver helpers have been removed; use dirmngr instead
      formatting tweaks
      formatting tweaks
      fix typo in gpg.info (closes: #760273)
      drop versioned Build-Conflicts on automake by setting environment variables in debian/rules
      experimental: update debian/watch for beta
      Merge tag 'upstream/2.1.0_beta834' into experimental
      work with newly-released beta instead
      drop versioned Build-Conflicts on automake by setting environment variables in debian/rules
      ship /usr/bin/gpgparsemail (closes: #760575)
      warn but don't fail when scdaemon options are in ~/.gnupg/gpg.conf (closes: #762844)
      do not break on --trust-model=always (closes: #751266)
      document that doc/OpenPGP is not actually an RFC, but just refers to one (closes: #745410)
      avoid duplicate argument parsing
      Bump Standards-Version to 3.9.6 (no changes needed)
      warn about scdaemon options in gpg.conf (Closes: #762844)
      Merge tag 'upstream/2.1.0_beta864' into experimental
      debian/changelog: note that we have a new beta
      adjusted patches
      build dirmngr from gnupg2 packaging
      gnupg2 now Recommends: dirmngr as well
      Removed dirmngr system service
      announce removal of dirmngr system service
      avoid ldap libraries as a hard dependency of dirmngr
      clean up old conffiles from previous dirmngr instances
      updated build-dependencies
      include gpgtar, use help2man to generate manpages at build time
      use dh_installman instead of using dh_install for manpages
      help2man pages should get cleaned up
      debian/dirmngr.install use the same path prefix as other debian/*.install files
      move from gpgtar to gpg-zip
      removing gpg-zip entirely because it is already shipped in debian with gpg
      ship /usr/bin/gpgparsemail (closes: #760575)
      obey wrap-and-sort
      ship gpg-check-pattern (and several other exaple files)
      document which bugs were fixed upstream already
      document that doc/OpenPGP is not actually an RFC, but just refers to one (closes: #745410)
      Bump Standards-Version to 3.9.6 (no changes needed)
      install info files with dh_installinfo
      generate our own manpage for gpg-check-pattern since upstream does not ship one
      Avoid unnecessary linkage
      do not try to install missing changelogs
      call dpkg-shlibdeps correctly to get the ldap Recommends: into dirmngr
      fix failures on uncomputable keygrips
      Merge tag 'upstream/2.1.0_beta895' into experimental
      --enable-large-secmem to ensure that gpg2 works with pre-generated oversized RSA keys
      dropping patches adopted upstream
      update dirmngr.NEWS with new version
      we are not using the dirmngr conffiles any more
      updated /etc/X11/Xsession.d/90gpg-agent to export $GPG_AGENT_INFO about the standard socket.
      added pkg-config to Build-Depends.
      update gnupg-agent.xsession to export ssh-agent where configured. (Closes: #767341)
      use cheap/fast entropy for the test suite so that builds on low-entropy machines go faster.
      2.1.0 is no longer beta
      added upstream signing keys for David Shaw and NIIBE Yutaka, as indicated upstream in Message-ID: 87ioisn1mo.fsf at vigenere.g10code.de
      Merge tag 'upstream/2.1.0' into experimental
      import upstream 2.1.0 release.
      avoid self-reporting as a beta now that this is a release
      Merge tag 'upstream/2.1.1' into experimental
      updated for 2.1.1 release
      gnupg2 now Breaks: older versions of dirmngr (closes: #769460)
      refresh name patch
      include translations, bugfixes, and cryptographic safety issues from upstream
      Merge tag 'upstream/2.1.2' into experimental
      updated for 2.1.2 release
      move from automake1.11 to plain automake (upstream uses 1.14 now)
      avoid regression from stock 2.1.2
      include upstream bugfixes
      Fix segv due to NULL value stored as opaque MPI.
      Avoid NULL dereference with opaque MPI.
      Add gnupg2-dbg (Closes: #781631)
      Merge tag 'upstream/2.1.3' into experimental
      preparing 2.1.3 release
      update patches
      added depends for -dbg
      store upstream-vcs-tag in gbp.conf
      convert to gbp-pq patchqueue
      include two bugfixes from upstream
      moved to gbp patch-queue
      work around the gnome-keyring gpg-agent hijacking
      include upstream-vcs-tag
      Merge tag 'upstream/2.0.27'
      rebase patch queue after importing upstream changes
      new upstream release, preparing changelog
      move from automake1.11 to plain automake (upstream uses 1.14 now)
      Merge tag 'upstream/2.1.4' into experimental
      updated debian patches for 2.1.4 release
      import encryption packet detection from upstream
      fix debian/copyright
      backported upstream fix for coping with unknown key types
      fix debian/copyright
      really address excess dependencies on headless server (thanks Raphaël Halimi for noticing) (Closes: #753163)
      for this current branch, focus only on gpg 2.0.*
      Merge tag 'upstream/2.0.28'
      updated patches
      prepare upstream bugfix release
      avoid excess dependencies on headless servers (Closes: #753163)
      updated gpg-agent description
      refer to RFC 4880 instead of 2440 (long overdue!)
      Merge tag 'upstream/2.1.5' into experimental
      preparing for 2.1.5-1 release
      pass DBUS_SESSION_BUS_ADDRESS through to the agent so that pinentry-gnome3 can work across sessions.
      d/clean: drop stamp-po to rebuild l10n (Closes: #788989)
      ensure that l10n files are rebuilt cleanly.
      update debian/changelog
      pass DBUS_SESION_BUS_ADDRESS to the agent for gnome3.
      Merge tag 'upstream/2.1.6' into experimental
      refresh patches
      new upstream release
      drop deprecated gpgsm-gencert.sh
      Merge tag 'upstream/2.1.7' into experimental
      refreshed patches
      new upstream release
      block ptrace connections to gpg-agent
      import change history from unstable
      use unstable instead of experimental branches
      Merge experimental into master
      merge tag upstream/2.1.8 into master
      New upstream release
      update patches
      correct ssh fingerprint for ECDSA nistp384 (Closes: #795636)
      Merge tag 'upstream/2.1.9'
      New upstream release
      refresh patches (drop patch from upstream)
      ship sks-keyservers.netCA.pem in dirmngr to make it easier to use hkps.
      avoid shipping Changelog-2011, use upstream ChangeLog (Closes: #803225)
      Merge tag 'upstream/2.1.10'
      updated changelog
      refresh debian patches
      update build dependencies
      apply wrap-and-sort for canonicalization
      fix keystrlen
      actually use sks-keyservers CA by default if the user asks for hkps://hkps.pool.sks-keyservers.net
      move ownership of some files in /usr/share/gnupg2/ to more appropriate owners like gpgsm and dirmngr.
      avoid infinite loop when doing --gen-revoke by fingerprint
      avoid failing with an error if we mis-detect multiple keys (Closes: #807819)
      removed explicit -dbg package, in favor of the autobuilt -dbgsym packages
      Merge tag 'upstream/2.1.11'
      new upstream release
      dropping patches merged upstream
      removed undocumented gpgkey2ssh; use gpg --export-ssh-key instead
      added temporary hook to view failing gpgtar test output on build daemons since i can't replicate the failures on my own build systems.
      trying again to get a proper dump of the gpgtar.test.log. sigh.
      disable gpgtar, since it is causing unpredictable testsuite failures and we don't ship it anyway.
      taking over gpgv-udeb from gnupg 1.4.x packaging
      debian/control: use secure transport for Vcs-* and Homepage
      avoid FTBFS with patch from upstream (Closes: #814842)
      bumped standards-version to 3.9.7 (no changes needed)
      build out-of-tree for cleanliness
      avoid failures on win32 when gpgconf.exe is not present (from upstream)
      adopt gpgv-win32 from the 1.4 packaging
      try to force libiconv for win32
      borrow regression tests as well
      port tests to gpg2
      enable tests to work on amd64
      avoid trying to strip gpgv.exe if it is not present (e.g. arch-dependent builds)
      avoid trying to use help2man on non-existent binaries
      avoid build failures when building only arch-dependent or only arch-independent packages.
      more cleanup on arch-dependent packages.
      re-indent debian/tests/gpgv-win32
      enable test to run as non-root on systems that are already setup with wine32
      dh_strip does not get called on architecture-independent builds, but we need to strip anyway for win32
      refresh patches from gbp pq
      have some manpages to ship when cross-compiling
      hand-craft the manpages upstream doesn't ship
      updated debian/watch to version 4
      fix the patch that avoids describing a build from git as a beta
      prepare changelog for new experimental release
      https://bugs.debian.org/730846 is supposed to be fixed already
      prepare upload to unstable
      simplified xsession startup
      drop renumbering patch
      Ship dedicated binaries in /usr/lib/gnupg instead of /usr/lib/gnupg2
      move names in .manpages files
      renaming packages
      add symlinks for {gnupg,gpgv}2 dummy transitional packages
      tell gnupg that it will be gpg, not gpg2
      switching over binary package names in experimental
      try to use proper names
      added --enable-gpg2-is-gpg to all build variants
      upstream ships the manpages with the wrong name; work around that
      ship lspgpot, gpg-zip, and gpgsplit in gnupg
      scdaemon takes over udev rules from gnupg 1.4 packaging
      Add migrate-pubring-from-classic-pgp, NEWS, and README.Debian
      document migrate-pubring-from-classic-gpg
      updated debian/changelog
      try to avoid importing things that are going to be autoreconfed anyway
      wrap-and-sort
      actually ship manpage for migration script
      Merge tag 'upstream/2.1.12' into experimental
      start to prepare for experimental release
      we do not need iconv for win32 builds any more
      drop patches already applied or otherwise addressed upstream
      refresh patches
      more cleanup related to upstream fixes
      build gnupg-module-overview.png and ship it
      bumped Standards-Version to 3.9.8 (no changes needed)
      upstream now avoids the gpgtar test when gpgtar isn't built
      simplify the shipping of gpgv.exe
      remove workaround that printed results of gpgtar.test
      use standard dh to ship Xsession.d script
      include two simple fixes from upstream
      document gpgv --weak-digest in --help
      Merge tag 'upstream/2.1.13' into experimental
      dropping upstream patches already applied
      import upstream patch
      rely entirely on gpgconf for socket paths instead of trying to figure them out manually
      move to newer libusb to enable smartcards
      preparing for 2.1.13
      brown paper bag time: fix build-dep from libusb-1.0.0-dev to libusb-1.0-0-dev
      pull bugfixes from upstream
      create systemd user mode services for gpg-agent, dirmngr, and scdaemon
      gnupg-agent now Provides: gpg-agent to work around a common confusion
      update dirmngr package description
      prepare new upload to experimental
      enable win32 packages to be built on non-x86 platforms
      make Recommends: strictly versioned between gnupg and {gpg-agent,dirmngr}
      make gnupg Provide: gpg and mention it in the package description
      drop mention of newpg, which has not been in debian for many releases
      gnupg2 2.0.18 predates debian wheezy, which is oldstable; drop mention in debian/control
      drop Suggests: gnupg-doc, which does not appear to be maintained
      drop all references to gpg-idea, which has not been in debian for several releases
      removed dependency on "dpkg (>= 1.15.4) | install-info", since that dpkg version predates oldstable (wheezy)
      prepare another experimental release
      Merge tag 'upstream/2.1.14' into experimental
      drop patches already upstream
      update build-deps
      added TinySCHEME copyright and licensing info
      avoid disabling gpgtar during the standard build because it appears to be necessary for the test suite
      use "wrap-and-sort -as" since it makes future diffs even cleaner
      upstream no longer ships com-certs or qualified.txt
      preparing release of 2.1.14
      mark the gpgv binary as Priority: important, since apt depends on it
      import a bunch of fixes from upstream
      include permissioning on patched-in tests
      Breaks: some packages that expect old gpg behavior (Closes: #831500)
      remove scdaemon.service; it will be managed by gpg-agent.service
      avoid bulleted items in debian/NEWS (thanks, Lintian!)
      debian/copyright: cleanup, fix URLs
      debian/control: use standard URL for Vcs-Browser
      fix spelling and grammar noticed by lintian
      avoid lintian notes about a misspelled "written"
      clean up gpgv2 Description
      break out arch-indep localization files into new gnupg-l10n package
      prepare 2.1.14-2 release
      cleanup debian/copyright
      update debian/watch
      prepare new release
      add ZeitControl card (Closes: #814584)
      three more fixes from upstream
      prepare another release
      actually ship /usr/share/doc/gnupg/README.Debian
      prepare new release
      Merge tag 'upstream/2.1.15'
      avoid libusb on hurd.  Thanks, Pino Toscano! (Closes: #834533)
      permissions on test suite are already fixed
      drop patches applied upstream and refresh remaining patches
      make gnupg2 reproducible by not regenerating documentation date
      modern gpgv breaks older python-debian (Closes: #835349)
      make autopkgtest work with modern wine (Closes: #835976)
      wrap-and-sort -ast for cleaner diffs
      gnupg Breaks: php-crypt-gpg <= 1.4.1-1 (addresses #835592)
      gnupg Breaks: python-apt <= 1.1.0~beta4 (addresses: #835465)
      gnupg Breaks: python-gnupg << 0.3.8-3 (addresses: #834514, #834600)
      gnupg Breaks: libgnupg-interface-perl << 0.52-3 (addresses: #834281)
      gnupg Breaks: libmail-gnupg-perl <= 0.22-1 (addresses: #835075)
      gnupg Breaks: libgnupg-perl (<< 0.19-1) (addresses: #834522)
      prepare new upstream release
      thanks, Lintian!
      ignore upstream gnupg.info, since we will rebuild it anyway
      restore keyid output in gpgv (Closes: #836144)
      avoid test suite failures when HOME does not exist
      prepare new release
      Use upstream fix to avoid touching homedir during test suite
      backward compatibility for preset-passphrase and protect-tool
      add Breaks: for python3-apt too (thanks, Harald Jenny!)
      Avoid network access during tests (Closes: #836259)
      more patches from upstream
      prepare new release
      update debian/tests/gpgv-win32
      more patches from upstream (Closes: #838153)
      tighten dependencies between gnupg and dirmngr (Closes: #834602)
      updated systemd user gpg-agent units for socket activation
      prepare release
      added udev rules for Fujitsu Siemens cardreader (Closes: #840312)
      mark transitional packages Multi-Arch: Foreign (closes: #840258)
      make gnupg2 binNMU-safe
      more patches from upstream
      track upstream decision-making about gpg-agent socket names
      prepare new release
      more upstream patches (Closes: #841437, #840680)
      prepare new bugfix release
      more upstream patches
      dirmngr systemd user service is now socket-activated.
      prepare release
      rename gpg-agent-restricted.socket to gpg-agent-extra.socket
      prepare release
      add some import-options for better migration
      Introduce gpgv-static package (Closes: #806940)
      Build-depend on adns for better DNS resolution in dirmngr
      Set simple and easy defaults for keyservers
      reorganize some patches to distinguish them from upstream
      more fixes from upstream
      Help dirmngr and gpg-agent idle better by default
      prepare release
      Merge tag 'upstream/2.1.16'
      drop patches incorporated upstream
      refresh patches to improve idling behavior of gpg-agent and dirmngr
      prepare new release
      clean up debian/copyright
      clean up generated .info files
      switch to using systemd user service files shipped upstream
      import patch from upstream

David Prévot (13):
      Update POT and PO files
      Ensure the translations get rebuild
      Update French translation
      Update Ukrainian translation
      Update German translation
      Update Danish translation
      Update Japanese translation
      Update Chinese (traditional) translation
      Update Russian translation
      Update Polish translation
      Update Spanish translation
      New Dutch translation
      Update changelog for 2.0.26-4 release

Eric Dorland (172):
      cp gnupg2 into trunk
      import gnupg2 1.9.20-1.1
      take over, fix for CVE-2006-3746
      make rules executable
      initial import of gnupg 1.9.22
      readd debian dir
      Load . into trunk/gnupg2.
      gnupg2 1.9.93
      gnupg2 1.9.94
      gnupg 2.0.0
      remove some unneeded files
      fix info, remove point-to-info.1
      finalise changelog
      dh_install instead of dh_movefiles
      rules fixup
      remove pkglibdir
      another tweak
      fix space detection
      install pcsc-wrapper in libexec
      remove silly version file
      tweak build-deps
      fix up the paths to some utility programs
      update standards-version
      remove dev warning
      fix missing replaces
      remove unnecessary dependencies
      generate gnupg2.info from gnupg.texi
      temporarily finalise
      run makeinfo manually
      finalise and add bug number
      initial import of gnupg2 2.0.1
      gnupg 2.0.2
      import gnupg2 2.0.3
      import gnupg2 2.0.3
      gnupg 2.0.4
      add watch file
      Merge branch 'upstream'
      Merge branch 'upstream'
      * New upstream release.
      * docs/scdaemon.texi: Remove old --print-atr documentation. Thanks
      * The "Ubuntu, I would have done it had you only asked" release.
      Merge branch 'upstream'
      * New upstream release. (Closes: #437289)
      Merge branch 'upstream'
      * New upstream release.
      Don't run make check, it's broken.
      * debian/watch: Use passive ftp, ftp.gnupg.org doesn't seem happy
      Merge branch 'upstream'
      * New upstream release. (Closes: #428635)
      * debian/rules: Don't ignore status of make distclean, just check for
      Merge branch 'upstream'
      New upstream release. Fixes CVE-2008-1530, Key import memory corruption.  (Closes: #472928)
      Add recommends on gnupg-agent.
      Fix FTBFS with gcc 4.3.
      Depend on pinentry instead of recommend, and make pinentry-gtk2 first.
      Finalize changelog
      Merge branch 'patch/gpgkey2ssh-fix'
      Urgency medium to try to beat the release.
      debian/control: Make the description a little more distinctive than gnupg v1's. Thanks Jari Aalto. (Closes: #496323)
      Merge branch 'upstream'
      New upstream release. (Closes: #496663)
      debian/control: Change build dependency on gs to ghoscript, since ghoscript has been replaced.
      Merge branch 'upstream'
      New upstream release. (Closes: #499569, #463270, #446494, #314068,  #519375, #514587)
      debian/compat: Use debhelper v7.
      debian/control: Update Standards-Version to 3.8.2.
      debian/control: Use ${misc:Depends}.
      Remove unnecessary patches
      Override pkgdatadir so that it points to /usr/share/gnupg2.
      Merge branch 'upstream'
      New upstream release.
      debian/control: Depend instead of Recommend gnupg-agent. (Closes: #538947)
      debian/control: Build depend on libreadline-dev instead of libreadline5-dev, since libreadline6-dev is out.
      Merge branch 'upstream'
      New upstream release.
      debian/source/format, debian/source/options, debian/source/patch-header: Convert to v3 quilt format, with single-debian-patch.
      debian/control: Tighten dependency on gnupg-agent. (Closes: #551792)
      Finalize changelog
      debian/*.lintian, debian/*.lintian-overrides, debian/rules: Rename lintian files and use dh_lintian instead of shell snippets.
      debian/source/patch-header, debian/source/options: Delete patch header and remove single-debian-patch option.
      debian/patches/01-gnupg2-rename.diff: Move patch to do the necessary renaming of gnupg -> gnupg2 in a quilt patch.
      debian/patches/02-encode-s2k.diff: Added patch to fix passphrase problem in gpgsm. Thanks Martijn van Brummelen for the NMU to fix this problem in 2.0.14-1.1.
      debian/patches/03-gpgsm-realloc.diff: Fix for "Realloc Bug with X.509 certificates" for gpgsm. (Closes: #590122)
      debian/rules, debian/control: Use dh-autoreconf and autopoint to regenerate autotools files at build time.
      Remove config.guess and config.sub from master branch to be in sync with upstream
      Merge branch 'upstream'
      New upstream release. (Closes: #584316, #603985, #603983, #603984)
      debian/patches/02-encode-s2k.diff, debian/patches/03-gpgsm-realloc.diff, debian/patches/series: Drop now unneeded security patches.
      debian/rules, debian/patches/01-gnupg2-rename.diff, debian/gnupg2.info, debian/gnupg2.install: No need to rename the info file anymore.
      debian/patches/01-gnupg2-rename.diff: Rename the autoconf package for better renaming of pkg directories. (Closes: #579006)
      debian/control, debian/compat: Upgrade to debhelper level 8.
      debian/control: Upgrade Standards-Version to 3.9.1.
      debian/control: Update Build-Depends versions for the latest release.
      debian/gnupg2.install: Add the applygnupgdefaults command. (Closes: #567537)
      debian/gnupg2.docs: doc/faq.html no longer exists.
      debian/control: Add dependency on dpkg (>= 1.15.4) | install-info for info install trigger.
      debian/control, debian/rules: Use debian build hardening.
      debian/rules: Convert the rules file to use the lovely dh format.
      debian/gnupg2.dirs, debian/gnupg-agent.dirs, debian/gpgsm.dirs: Remove unless dirs files.
      debian/gnupg-agent.lintian-overrides, debian/gnupg2.lintian-overrides, debian/gpgsm.lintian-overrides: Remove unneeded lintian-overrides files.
      Merge branch 'upstream'
      New upstream release.
      debian/copyright: Update ftp location. (Closes: #624404)
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/control, debian/gpgsm.install, debian/scdaemon.install: Add a separate package for the scdaemon. (Closes: #416129)
      debian/control, debian/gpgsm.install, debian/gnupg2.install, gnupg-agent.install: Move gpg-preset-passphrase and gpg-protect-tool into the gnupg-agent.
      debian/control: Upgrade Standards-Version to 3.9.2.
      debian/rules: Install ChangeLog for new scdaemon package.
      debian/control: Add Multi-Arch: foreign to all packages.
      Merge branch 'upstream'
      New upstream release.
      debian/rules: Update ChangeLog locations.
      debian/control: Use canonical addresses for VCS.
      debian/control: Fix scdaemon short description.
      debian/patches/02-cve-2012-6085.diff: Patch from upstream to fix CVE-2012-6085, "gnupg key import memory corruption". (Closes: #697251)
      Merge tag 'upstream/2.0.20'
      New upstream release.
      debian/patches/02-cve-2012-6085.diff: Remove, merged upstream.
      debian/control: Upgrade Standards-Version to 3.9.4.
      debian/compat, debian/control: Upgrade to debhelper v9.
      debian/control, debian/rules: Drop hardening-wrapper, now that we use debhelper v9.
      debian/scdaemon.install: scdaemon has moved under $libexecdir.
      debian/control: Tighten dependency on scdaemon.
      Add bugs closed in 2.0.20
      debian/rules: Turn on al hardening options.
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/gnupg-agent.install, debian/gnupg2.install, debian/scdaemon.install: Fix /usr/lib paths for multi-arch.
      debian/rules: Pass ${pkglibdir} to --libexecdir since dh v9 passes ${libdir} by default.
      Merge tag 'upstream/2.0.21'
      New upstream release. (Closes: #613465, #713287)
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/control: Fix Vcs-Git path.
      debian/control: Now depends on libgpg-error >= 1.11.
      debian/control: Build-Depends on automake1.11 since the test suite
      debian/control: Also need a Build-Conflicts on automake (<= 1.12).
      debian/rules, debian/gnupg2.install: Switch libexecdir to /usr/lib/gnupg2 to install helper binaries to a non-multiarch specific location. (Closes: #717303)
      debian/control, debian/gpgv2.install: Split out gpgv2 into its own package.
      debian/control, debian/gnupg2.install, debian/kbxutil.1: Add rule and manpage for kbxutil using help2man.
      debian/patches/02-gpgv2-dont-link-libassuan.diff: Don't link gpgv2 against libassuan as it's not used.
      Fix libexec paths
      Add proper Conflicts and Replaces for gpgv2.
      debian/rules: Install changelog for gpgv2.
      Merge tag 'upstream/2.0.22'
      New upstream version. Fixes CVE-2013-4402. (Closes: #725433)
      debian/patches/03-fix-empty-usage-flags.diff: Patch for CVE-2013-4351. (Closes: #722724)
      New upstream version. Fixes CVE-2013-4402 and CVE-2013-4351. (Closes: #725433, #722724)
      debian/gnupg2.install: Install gnupg-card-architecture.png for the info file.
      debian/control: Fix Build-Conflicts on newer automakes. Thanks Chris Boot. (Closes: #726015)
      debian/control: IDEA is no longer patented, drop its metion from the description. Thanks brian m. carlson. (Closes: #726139)
      debian/rules: Disable the test suite on mips and mipsel to work around Bug:#730846.
      debian/watch, debian/upstream-signing-key.gpg: Add upstream signing key for uscan verification.
      debian/kbxutil.1, debian/rules: Add better description and regenerate the manpage.
      debian/control: Remove version on gpg-idea conflict, add missing Breaks for gpgsm and convert Conflicts to Breaks for gpgv2.
      debian/control: Move gnupg-agent to Depends for gpgsm instead of Replaces (which in turn should have been Recommends).
      debian/control: Standards-Version to 3.9.5.
      debian/copyright: Switch to a shiny DEP-5 copyright file.
      Fix upstream-signing-key extension
      Merge tag 'upstream/2.0.23'
      New upstream release.
      debian/upstream/signing-key.asc: Rename upstream-signing-key.pgp to the new, supported name.
      debian/control: Restore versioned conflict against gpg-idea. (Closes: #733984)
      debian/control: Add Recommends on dirmngr for gpgsm. (Closes: #683579)
      Merge tag 'upstream/2.0.24'
      New upstream release. Fixes CVE-2014-4617 "infinite loop when decompressing data packets". (Closes: #752498)
      debian/patches/02-gpgv2-dont-link-libassuan.diff: Drop, now upstreamed.
      Merge tag 'upstream/2.0.25'
      New upstream release.
      debian/control: Switch to libgcrypt20-dev (aka 1.6 release).
      Merge tag 'upstream/2.0.26'
      New upstream release.
      debian/control: Suggest parcimonie. Thanks ilf. (Closes: #752261)
      debian/patches/0003-Include-defs.inc-in-BUILT_SOURCES.patch: Fix for build failure when rebuilding info docs.

NIIBE Yutaka (1):
      update scdaemon dependencies

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  dd06d33   scd: Add support of ECC pubkey attribute.
       new  4ab8107   po: convert localizations to UTF-8
       new  af19634   g10: Use the accessor functions for accessing and comparing key ids
       new  c2e5634   g10: Load the key block if the supplied user id list is NULL.
       new  221b0bd   g10: Don't ignore failure.  On failure, rollback.
       new  3825847   g10: Improve some comments and a string.
       new  6e930f0   g10: On failure, propagate the return code.
       new  215180d   move some file encodings to UTF-8
       new  0d67241   Fix more spelling
       new  7305d27   Fix comment and format.
       new  55675fa   doc: Clarify forward-compatible expectations
       new  18bbefa   gpg: Avoid malloc failure due to no key signatures
       new  47baeac   gpgscm: Fix gcrypt version check.
       new  3899041   doc: Update license information.
       new  293d265   build: Distribute fake pinentries.
       new  086d219   g10: Fix memory leak.
       new  5bf1fac   dirmngr: Silence diagnostics about starting housekeeping.
       new  9986436   gpg: Fix regression in fingerprint printing.
       new  83a406b   tests: Use descriptive temporary file names.
       new  ab483ef   tests: Refine exception handling.
       new  58007e5   tests: Correctly handle exceptions in resource handling macros.
       new  9a0659a   tests: Implement interpreter shutdown using exceptions.
       new  884e78e   tests: Refine the repl function.
       new  858af2b   doc: Fix Martin Hellman's name.
       new  fa34650   doc: Fix typos.
       new  20a27d8   doc: Fix "Not(e) that you can(not) abbreviate".
       new  f32689f   doc: Use the right reference commands.
       new  825c1df   doc: Eliminate inconsistent UK English.
       new  f25e040   doc: Fix mistakes.
       new  00d6d8b   doc: Replace UTF8 with UTF-8.
       new  7899162   doc: Add missing description of datafile.
       new  9d2b7bf   doc: Replace rfc0123 with RFC-0123.
       new  3776242   doc: Improve markup.
       new  32bcf8b   doc: Fix spacings.
       new  0eaab1a   doc: Fix full stops.
       new  91d5e6f   doc: Implement simple '@ref'erences.
       new  9c1b3bc   doc: minor fix for @xref.
       new  81cb71a   doc: Fix fix "Not(e) that you can(not) abbreviate".
       new  05e4889   doc: Add a few extra coding standard notes.
       new  8078d82   doc: Do not end section names with "."
       new  b9b4ff8   doc: Fix a xref usage.
       new  4644c27   dirmngr: Open file CRL's in binary mode
       new  285d193   dirmngr: Fix type.
       new  988a04b   tests: Reduce runtime of excessive test.
       new  49fae88   tests: Remove list of tests from the test runner.
       new  6c4c0e3   tests: Port the quick key manipulation test to Scheme.
       new  c644962   tests: Drop the old shell-based tests.
       new  7e0379a   tests: Add documentation, make interactive debugging possible.
       new  df5353b   g10: When adding a user id, make sure the keyblock has been prepared.
       new  98bc6f4   agent: Allow only specific digest size for ECDSA.
       new  836b723   dirmngr: Removal of no-libgcrypt.o.
       new  4e4843e   agent, sm: Set CTX after start_agent.
       new  2b23a32   common: Correctly handle modules relying on npth.
       new  2e64ccb   build: Fix check for resolver library on macOS.
       new  20a1683   build: Do not link gpg-connect-agent against npth.
       new  829949f   gpg: Make sure that internal key import is done with a binary stream.
       new  c9237bf   gpg: Make import filter data object more flexible.
       new  8039366   gpg: Reject import if an import filter removed all user ids.
       new  cbf2ac6   gpg: Improve WKD by importing only the requested UID.
       new  9e6f8a5   dirmngr: Fix STARTTLS on LDAP connections.
       new  4ac138c   tools: Give mime parser callbacks access to the rfc822 parser.
       new  95d60c6   tools: Simplify the mime-maker container creation.
       new  29db3be   tools: Change mime-maker to write out CR,LF.
       new  f776757   tools: Allow retrieval of signed data from mime-maker.
       new  c738f92   tools: Convey signeddata also to the part_data callback in mime-parser.
       new  3380028   wks: Partly implement draft-koch-openpgp-webkey-service-02.
       new  8d37018   w32: Fix STARTTLS on LDAP connections.
       new  e11686f   agent: Enable restricted, browser, and ssh socket by default.
       new  6054e8a   build: Fix build against libiconv.
       new  de67055   wks: Avoid long trustdb checks.
       new  95cf7af   agent: Kludge to allow disabling of the extra sockets.
       new  80cc16e   agent: Create the extra sockets in the standard socket dir.
       new  a43739a   agent: Remove the warning for the GKR hijacking.
       new  eda1764   agent, dirmngr, scd: npth_init must be after fork.
       new  fbc83c0   tools: Ignore existing directories in gpgtar.
       new  949e701   tests,w32: Avoid using 'glob'.
       new  41b510f   tests,w32: Do not expose 'glob' to gpgscm.
       new  4a232d2   build,w32: Unconditionally build tests.
       new  9f92b62   agent: Implement --supervised command (for systemd, etc).
       new  dc059af   agent: Adjust supervised mode for the new default socket names.
       new  afcfae7   agent: Adjust cleanup for supervised mode.  Fix for W32.
       new  1a9c8d7   agent: Streamline the supervised mode code.
       new  a2127c7   agent: Fix error handling in map_supervised_sockets
       new  f57dc2b   agent: Fix npth + supervised mode problem.
       new  1cedc32   agent: Another minor fix to map_supervised_sockets.
       new  e514a5b   wks: Add option --fake-submission-addr to gpg-wks-client.
       new  8ce800d   wks: Send key encrypted as required by draft -02
       new  07cfb3b   gpgscm: Update callsite of 'gnupg_spawn_process'.
       new  32f81f5   tools: Improve error handling.
       new  6b62682   g10: Fix testing for debug flag.
       new  2d44675   sm: Remove statement without effect.
       new  73000d1   g10: Use appropriate variant of 'abs'.
       new  b0d2526   g10: Fix singular term.
       new  4aadc75   common: Avoid pointer arithmetic on string literals.
       new  fc0b392   agent, dirmngr, scd: Fix init_common_subsystems.
       new  5d43d28   gpg: Put extra parens around bit tests.
       new  1a24c67   Revert "g10: Fix singular term."
       new  fb3b3e1   agent: Fix get_socket_name.
       new  5afbfdf   tools: Fix error handling.
       new  dff2660   gpgscm: Improve path handling.
       new  11eac7e   gpgscm: Improve test of low-level functions.
       new  1f76f8d   tests: Improve handling of Windows newlines.
       new  cbbf0a7   tests: Rework test environment setup.
       new  78eda33   g10: Fix a column's type in TOFU DB.
       new  6fdf37f   g10: Correctly determine whether a binding has a conflict.
       new  ca84f65   g10: Make a singular string singular.
       new  3ad17e7   g10: When changing a TOFU binding's policy, update the conflict info
       new  2282c3b   tests: Remove support for deprecated functionality.
       new  5bf92e5   g10: If an sqlite operation fails, map the error code to GPG_ERR_GENERAL
       new  e09166c   g10: Still check if the key is an UTK or cross signed in batch mode.
       new  4c0389f   g10: Be more careful when checking cross signatures.
       new  d2d936f   tests: Add test data to TEST_FILES.
       new  95d0f3e   g10: Be more careful when checking if a binding is signed by a UTK.
       new  0c56ad5   tests: Use shorter filenames.
       new  f99c5fa   dirmngr: add VERSIONCHECK command
       new  c318561   dirmngr: use gnupg_mkdtemp instead of mkstemp
       new  2f7d4c3   agent: Move inotify code to common and improve it.
       new  0b0f9a3   agent: Use straightforward names for the default socket names.
       new  70a8584   gpgconf: Fix for --homedir.
       new  25428be   scd: Fix keytocard for ECC.
       new  c53ce53   doc: Point gpg-agent(1) at the right gpg manpage in SEE ALSO.
       new  869c06e   doc: Document how to manually shut down gpg-agent.
       new  c2e713d   gpgscm: Initialize nesting stack.
       new  e0e782b   Register DCO for Arnaud Fontaine
       new  f1845f2   scd: minor cleanup to merge other works.
       new  34439da   scd: Support ECC key generation.
       new  727ca74   common,w32: Make use of default_errsource in exechelp.
       new  f2d39a6   common,w32: Extend gnupg_create_inbound_pipe et al.
       new  05a1e41   common,w32: Communicate with child in non-blocking mode.
       new  8dce5ee   common: Fix copying data to estreams.
       new  72a99f5   dirmngr: improve VERSIONCHECK
       new  82cbab9   agent: Add --card option for READKEY.
       new  980c037   g10: smartcard keygen change.
       new  b680f79   scd: GENKEY updates the public key in APP.
       new  9a34e21   agent, g10: Fix keygen.
       new  2d79477   tests: Create and remove socket directories.
       new  bf37916   tests,w32: Cope with Windows line endings.
       new  8c7c4fa   common,w32: Fix setting environment variables on Windows.
       new  ca9597f   tests: Flush stdout in the fake pinentry.
       new  71158d8   tests: Simplify test.
       new  1ffd475   agent: Fix saving with FORCE=1.
       new  6e85ac7   Fix use cases of snprintf.
       new  161cb22   g10: Support ECC for gen_card_key.
       new  dafce6f   g10: Don't ask keysize for for non-RSA card.
       new  693e657   scd: Fix segfault changing key attr.
       new  d2653b1   g10,scd: Fix ECC keygen.
       new  f7e5063   g10: Write first keybox record in binary mode
       new  987bbb2   g10: More card key generation change.
       new  acef095   g10: Fix card keygen for decryption.
       new  945e7ab   common: Fix openpgp_is_curve_supported.
       new  b1828c1   scd: Use canonical curve name of libgcrypt.
       new  5e7dfd9   dirmngr: Fix segfault in VERSIONCHECK.
       new  fdb653a   agent: Slightly change structure of cmd_readkey.
       new  8c40b3b   agent: Minor cleanup for recent change in findkey.c
       new  9d6146d   gpg: Replace two sprintf calls.
       new  7983f87   common: Use strconcat in gnupg_setenv.
       new  b120f35   dirmngr: Allow command VERSIONCHECK to handle 3 part version numbers.
       new  f88f11a   tests: Do not autostart gpg-agents on teardown.
       new  852b8f0   agent,tests,w32: Fix relaying pinentry user data, fix fake-pinentry.
       new  3b5f5e0   common: avoid segfault
       new  27f6d5b   agent: --supervised mode improvements.
       new  900c18f   doc: Fix spelling of "internal".
       new  21b3184   tests: Improve portability of fake-pinentry.
       new  ece13f1   common: Use GPG_ERR_INV_VALUE instead of GPG_ERR_EINVAL.
       new  b77f95a   agent: Avoid double error message.
       new  d1ccab5   dirmngr: Fix hang due to deferred thread initialization.
       new  96414ba   dirmngr: Fix help string and argument.
       new  bc28f32   common: Fix gnupg_inotify_has_name.
       new  6bb6ac5   dirmngr: report actual socket name.
       new  6316b28   agent,common: move get_socket_name() into common.
       new  75f8aaf   dirmngr: Implement --supervised command (for systemd, etc).
       new  b648f28   g10: ECDH shared point format.
       new  6bbd97d   scd: Add 0x41 prefix for x-coordinate only result.
       new  ca0ee4e   g10: Fix ECDH, clarifying the format.
       new  8a9341b   dirmngr: Fix error return for ADNS.
       new  6f1d812   dirmngr: More ADNS error fix.
       new  8b3d0d1   common: Fix gnupg_inotify_has_name, differently.
       new  a15ed5a   gpg: Convey --quick option to dirmngr for --auto-key-retrieve.
       new  45dfc02   dirmngr: ADNS error handling fix.
       new  a9c8b5f   common: Remove debug output from gnupg_get_socket_name.
       new  cf20b23   dirmngr: Do not implement --supervised in Windows.
       new  66a0091   g10: Assert preconditions.
       new  445f0c1   Fix typos.
       new  8ea72a7   g10: Fix iteration over getkey results.
       new  ece9ade   common: Add GNUPG_MODULE_NAME_GPGV.
       new  8fced66   gpg: Verify multiple detached signatures with different hash algos.
       new  5a1f6a0   dirmngr: Fix signature checking.
       new  b6f08db   gpg: Enable the Issuer Fingerprint from rfc4880bis
       new  614ca00   g10: Fix bit setting.
       new  eec365a   g10: Avoid reading in keys when possible.
       new  7a634e4   g10: Avoid gratuitious SQLite aborts and starving writers.
       new  3b6b8fe   w32: Fix PKG_CONFIG_LIBDIR in --build-w32
       new  ad491ce   common: New function gnupg_usleep.
       new  5d4f140   g10,w32: Fix build on Windows.
       new  68b59bb   Spelling: correct spelling of "passphrase".
       new  5e693dd   build: Fix misspelled dirmngr.
       new  60ad1a7   gpgscm: Fix inclusion of readline header.
       new  488b183   common: Improve compare_string_versions.
       new  0ed6a6d   gpgconf: Add command --query-swdb.
       new  d10b67b   gpgconf: Add a new field to the --query-swdb output.
       new  1ec07cb   gpgscm,tests: Add new functions to the test environment.
       new  ab89164   g10: Improve and unify key selection for -r and --locate-keys.
       new  c1ea0b5   agent: Extend the PINENTRY_LAUNCHED inquiry and status.
       new  f9da935   scd: Add --advanced option for READKEY.
       new  cd00b07   scd: Fix length error for READKEY.
       new  43f8006   gpgscm: Implement 'atexit'.
       new  1f45878   gpgscm: Fix printing strings containing zero bytes.
       new  2312a7f   indent: Move comments inside the block.
       new  4d7dc43   Change all http://www.gnu.org in license notices to https://
       new  5840353   g10: Fix crash.
       new  6e677f9   gpgscm: Add support for pseudo-random numbers.
       new  413cc50   gpgscm,w32: Provide schemish file handling for binary files.
       new  70215ff   tests,tools: Reimplement 'mk-tdata' in Scheme.
       new  56e1864   wks: Encrypt all client mails also the target key,
       new  37751d2   tests: Fix build.
       new  ac07846   tests: Do not allow tests to be run in a shared environment.
       new  a55393c   tests: Move environment creation and teardown into each test.
       new  4d98a72   gpgscm: Drop 'len' argument from splice.
       new  abe0cc7   gpgscm: Generalize splice to write to multiple sinks.
       new  26df829   tests: Write a log file for each test.
       new  7cbb080   common,w32: Simplify locking.
       new  dd13b2a   tests,w32: Make cleanup more robust.
       new  d445483   gpgscm: Fix error message.
       new  591d61d   gpgscm: Expose seek and associated constants.
       new  4dd4801   tests: Simplify test.
       new  2a7615c   tests: Log and display output from tests when run in parallel.
       new  1062953   tests: Fix environment setup.
       new  c7ea98c   dirmngr: Improve concurrency in the non-adns case.
       new  088d955   gpg: Improve error message for --quick-gen-key.
       new  d7c5799   gpgscm: Remove dubious stack implementation.
       new  9ee184b   gpgscm: Drop obsolete commented-out code.
       new  568cfcd   gpgscm: Make the compile-hook configurable.
       new  d3a98ff   gpgscm: Reduce opcode dispatch overhead.
       new  e0cbd33   gpgscm: Recover cells used to maintain interpreter state.
       new  ee08677   gpgscm: Recover cells from the list of recently allocated cells.
       new  c8044c6   sm: Remove unused arg SECRET from keydb functions.
       new  5d13581   gpg,sm: Add STATUS_ERROR keydb_search and keydb_add-resource.
       new  1854f0f   doc: Clarify dirmngr option --daemon.
       new  e51912f   agent: Clean up comments.
       new  57e95f5   doc: Include config examples for socket-activated user services.
       new  7b04a43   dirmngr: Prepare to trigger jobs by network activity.
       new  4473db1   agent: Kludge to mitigate blocking calls in Libgcrypt.
       new  6bf6981   agent: Improve concurrency when Libgcrypt 1.8 is used.
       new  4ee4d0b   scd: Fix status info encoding.
       new  83c184a   gpgscm: Avoid cell allocation overhead.
       new  2cd281c   g10: Fix memory leak.
       new  93cc322   gpgscm: Recover more cells.
       new  64a58e2   gpgscm: Mark cells requiring finalization.
       new  809d67e   g10: Fix memory leak.
       new  f86b1a1   gpg: New option --compliance.
       new  1f7639e   g10: Fix memory leak.
       new  26c7c1d   sm: New stub option --compliance.
       new  bd60742   g10: Fix use-after-free.
       new  1d03cc7   g10: Fix iteration over getkey results.
       new  d20107f   g10: Fix memory leak.
       new  12834e8   g10: Optimize key iteration.
       new  8ea3b4c   gpg: Use usual free semantics for packet structure free functions.
       new  4bd12b5   doc: Add comment to make clear that KBNODE is deprecated.
       new  b47603a   gpg: Add new compliance mode "de-vs".
       new  500e594   gpgv: New option --enable-special-filenames.
       new  43bfaf2   gpg: New option --override-session-key-fd.
       new  c564790   wks: Always build gpg-wks-client.
       new  c4506a3   common: Rename keybox_file_rename to gnupg_rename_file.
       new  4839e6d   scd,dirmngr: Keep the standard fds when daemonizing.
       new  52c10a2   dirmngr: Add command to only load the swdb.
       new  d8da5bc   gpgconf: Change the displayed names of the components.
       new  c45ca31   dirmngr: Improve downloading of swdb.lst.
       new  bd91f92   dirmngr: Auto-sownload the swdb.lst
       new  fc53a4d   gpgscm: Fix string.
       new  4f18932   gpgscm: Re-enable the garbage collector in case of errors.
       new  5210ff7   doc: Typo fixes.
       new  c4e02a3   dirmngr: Register hkp-cacert even if the file doesn't exist yet
       new  7c1613d   dirmngr: Add system CAs if no hkp-cacert is given
       new  8fb4822   dirmngr: Use a default keyserver if none is explicitly set
       new  b6066ab   scd: Don't limit to ST-2xxx for PC/SC.
       new  b2e1b17   g10: Fix creating a lock for ToFU.
       new  b3a9172   dirmngr: More w32 system daemon cleanup
       new  833eef9   dirmngr: Use a longer timer tick interval.
       new  1c0b140   g10: Fix flags to open for lock of ToFU.
       new  11aaa9c   po: Update Russian translation.
       new  e8ce5e3   po: Update the German translation
       new  5b5bf9b   po: Auto-update
       new  0a641ad   Release 2.1.16
       new  648ae6f   New upstream version 2.1.16
       new  5d89e61   Merge tag 'upstream/2.1.16'
       new  0418a4d   drop patches incorporated upstream
       new  377faa4   refresh patches to improve idling behavior of gpg-agent and dirmngr
       new  3610990   prepare new release
       new  0ecebba   clean up debian/copyright
       new  59c0791   clean up generated .info files
       new  8407e53   switch to using systemd user service files shipped upstream
       new  626693b   import patch from upstream

The 292 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-gnupg/gnupg2.git



More information about the Pkg-gnupg-commit mailing list