[Pkg-gnupg-commit] [gnupg2] annotated tag debian/2.1.22-1 created (now e7a00f3)

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Aug 7 11:55:56 UTC 2017


This is an automated email from the git hooks/post-receive script.

dkg pushed a change to annotated tag debian/2.1.22-1
in repository gnupg2.

        at  e7a00f3   (tag)
   tagging  81bfe6e685726c208204edf82a165f6e715e2d6f (commit)
  replaces  upstream/2.1.22
 tagged by  Daniel Kahn Gillmor
        on  Mon Aug 7 07:53:58 2017 -0400

- Log -----------------------------------------------------------------
gnupg2 Debian release 2.1.22-1
-----BEGIN PGP SIGNATURE-----

iQJKBAABCgA0FiEEOCdgUepHf6PklTkyFJitxsGSMjcFAlmIVNYWHGRrZ0BmaWZ0
aGhvcnNlbWFuLm5ldAAKCRAUmK3GwZIyNwZfD/0Uoi90qFRpZNYz0zoXWNW60BlO
h3YYyUeSqKmODn1/qinJ2VdyXC1yO9ZFVBtenSlJbz2SZkgUjJ1m7XBRI+aEYDkZ
E7mEk7MmjYA/FGWJBN34/CaCdsWqidssZqWHv8TBhIMku4z8+QkAufpvdTw5/XF4
UsXtWJ9nxF/bmQk4cTkCZ/OLpMZ7fk+ldkot2t3tk/I/XxmM0/cuO1b11jwJ+T4M
WmrD3y0HWskpD0HLPQOHw7+LqAZtnXDXlk0SS1WSWuQbFm0RmsmnU0Mv2jjXHXvE
o1jBgENz4VPZJ0x0MppeEKBPjEJUkdA9XxvTh7+gm1AXGepuP/R+V2utZ7RN5MZB
TUkqOiidF70/XVCknfTtxJOhZ6yoKy0rIXhgYk2RMvHTHyGfBBupKeKlLU10E6tK
Goi9NZnQGHZKH09ymeTb15FtRejIhH0A+ZifIfw4TbcgdUdM2kblBdZHVNZt4Fcf
KgE8OzK0JZfvBTeYJx9ANECZ1TbD44rqDBL8/T3tNfMrbCRuFCX2EEFqiKWm9NMv
sgx4qPZRVHdK3Ghu+0WvLZitIgs1GF9nag7UzZ74o+gQ87HTHo3RBqKx8e3X1nhF
lUxLdHzQ1YHK+AbxNPoY26B7zgJuWBjgFkmC+aNOBKdvdWaUKRTE7BXEW8DTfSBJ
Q5bWEdjsi11yr3dLdQ==
=M3WT
-----END PGP SIGNATURE-----

Daniel Kahn Gillmor (450):
      Fix broken generation of rsa and dsa keys.
      ignore emacs turds in debian/
      update Vcs fields
      move package to group maintenance
      wrap-and-sort cleanup of debian/*
      prepare release
      use pristine-tar
      starting experimental branch for 2.1
      Imported Upstream version 2.1.0~beta783
      update build-deps
      refresh renaming patch for 2.1
      prepare 2.1 beta upload to unstable
      switch from pth to npth
      pcsc-wrapper dropped by upstream
      keyserver helpers have been removed; use dirmngr instead
      formatting tweaks
      formatting tweaks
      fix typo in gpg.info (closes: #760273)
      drop versioned Build-Conflicts on automake by setting environment variables in debian/rules
      experimental: update debian/watch for beta
      Merge tag 'upstream/2.1.0_beta834' into experimental
      work with newly-released beta instead
      drop versioned Build-Conflicts on automake by setting environment variables in debian/rules
      ship /usr/bin/gpgparsemail (closes: #760575)
      warn but don't fail when scdaemon options are in ~/.gnupg/gpg.conf (closes: #762844)
      do not break on --trust-model=always (closes: #751266)
      document that doc/OpenPGP is not actually an RFC, but just refers to one (closes: #745410)
      avoid duplicate argument parsing
      Bump Standards-Version to 3.9.6 (no changes needed)
      warn about scdaemon options in gpg.conf (Closes: #762844)
      Merge tag 'upstream/2.1.0_beta864' into experimental
      debian/changelog: note that we have a new beta
      adjusted patches
      build dirmngr from gnupg2 packaging
      gnupg2 now Recommends: dirmngr as well
      Removed dirmngr system service
      announce removal of dirmngr system service
      avoid ldap libraries as a hard dependency of dirmngr
      clean up old conffiles from previous dirmngr instances
      updated build-dependencies
      include gpgtar, use help2man to generate manpages at build time
      use dh_installman instead of using dh_install for manpages
      help2man pages should get cleaned up
      debian/dirmngr.install use the same path prefix as other debian/*.install files
      move from gpgtar to gpg-zip
      removing gpg-zip entirely because it is already shipped in debian with gpg
      ship /usr/bin/gpgparsemail (closes: #760575)
      obey wrap-and-sort
      ship gpg-check-pattern (and several other exaple files)
      document which bugs were fixed upstream already
      document that doc/OpenPGP is not actually an RFC, but just refers to one (closes: #745410)
      Bump Standards-Version to 3.9.6 (no changes needed)
      install info files with dh_installinfo
      generate our own manpage for gpg-check-pattern since upstream does not ship one
      Avoid unnecessary linkage
      do not try to install missing changelogs
      call dpkg-shlibdeps correctly to get the ldap Recommends: into dirmngr
      fix failures on uncomputable keygrips
      Merge tag 'upstream/2.1.0_beta895' into experimental
      --enable-large-secmem to ensure that gpg2 works with pre-generated oversized RSA keys
      dropping patches adopted upstream
      update dirmngr.NEWS with new version
      we are not using the dirmngr conffiles any more
      updated /etc/X11/Xsession.d/90gpg-agent to export $GPG_AGENT_INFO about the standard socket.
      added pkg-config to Build-Depends.
      update gnupg-agent.xsession to export ssh-agent where configured. (Closes: #767341)
      use cheap/fast entropy for the test suite so that builds on low-entropy machines go faster.
      2.1.0 is no longer beta
      added upstream signing keys for David Shaw and NIIBE Yutaka, as indicated upstream in Message-ID: 87ioisn1mo.fsf at vigenere.g10code.de
      Merge tag 'upstream/2.1.0' into experimental
      import upstream 2.1.0 release.
      avoid self-reporting as a beta now that this is a release
      Merge tag 'upstream/2.1.1' into experimental
      updated for 2.1.1 release
      gnupg2 now Breaks: older versions of dirmngr (closes: #769460)
      refresh name patch
      include translations, bugfixes, and cryptographic safety issues from upstream
      Merge tag 'upstream/2.1.2' into experimental
      updated for 2.1.2 release
      move from automake1.11 to plain automake (upstream uses 1.14 now)
      avoid regression from stock 2.1.2
      include upstream bugfixes
      Fix segv due to NULL value stored as opaque MPI.
      Avoid NULL dereference with opaque MPI.
      Add gnupg2-dbg (Closes: #781631)
      Merge tag 'upstream/2.1.3' into experimental
      preparing 2.1.3 release
      update patches
      added depends for -dbg
      store upstream-vcs-tag in gbp.conf
      convert to gbp-pq patchqueue
      include two bugfixes from upstream
      moved to gbp patch-queue
      work around the gnome-keyring gpg-agent hijacking
      include upstream-vcs-tag
      Merge tag 'upstream/2.0.27'
      rebase patch queue after importing upstream changes
      new upstream release, preparing changelog
      move from automake1.11 to plain automake (upstream uses 1.14 now)
      Merge tag 'upstream/2.1.4' into experimental
      updated debian patches for 2.1.4 release
      import encryption packet detection from upstream
      fix debian/copyright
      backported upstream fix for coping with unknown key types
      fix debian/copyright
      really address excess dependencies on headless server (thanks Raphaël Halimi for noticing) (Closes: #753163)
      for this current branch, focus only on gpg 2.0.*
      Merge tag 'upstream/2.0.28'
      updated patches
      prepare upstream bugfix release
      avoid excess dependencies on headless servers (Closes: #753163)
      updated gpg-agent description
      refer to RFC 4880 instead of 2440 (long overdue!)
      Merge tag 'upstream/2.1.5' into experimental
      preparing for 2.1.5-1 release
      pass DBUS_SESSION_BUS_ADDRESS through to the agent so that pinentry-gnome3 can work across sessions.
      d/clean: drop stamp-po to rebuild l10n (Closes: #788989)
      ensure that l10n files are rebuilt cleanly.
      update debian/changelog
      pass DBUS_SESION_BUS_ADDRESS to the agent for gnome3.
      Merge tag 'upstream/2.1.6' into experimental
      refresh patches
      new upstream release
      drop deprecated gpgsm-gencert.sh
      Merge tag 'upstream/2.1.7' into experimental
      refreshed patches
      new upstream release
      block ptrace connections to gpg-agent
      import change history from unstable
      use unstable instead of experimental branches
      Merge experimental into master
      merge tag upstream/2.1.8 into master
      New upstream release
      update patches
      correct ssh fingerprint for ECDSA nistp384 (Closes: #795636)
      Merge tag 'upstream/2.1.9'
      New upstream release
      refresh patches (drop patch from upstream)
      ship sks-keyservers.netCA.pem in dirmngr to make it easier to use hkps.
      avoid shipping Changelog-2011, use upstream ChangeLog (Closes: #803225)
      Merge tag 'upstream/2.1.10'
      updated changelog
      refresh debian patches
      update build dependencies
      apply wrap-and-sort for canonicalization
      fix keystrlen
      actually use sks-keyservers CA by default if the user asks for hkps://hkps.pool.sks-keyservers.net
      move ownership of some files in /usr/share/gnupg2/ to more appropriate owners like gpgsm and dirmngr.
      avoid infinite loop when doing --gen-revoke by fingerprint
      avoid failing with an error if we mis-detect multiple keys (Closes: #807819)
      removed explicit -dbg package, in favor of the autobuilt -dbgsym packages
      Merge tag 'upstream/2.1.11'
      new upstream release
      dropping patches merged upstream
      removed undocumented gpgkey2ssh; use gpg --export-ssh-key instead
      added temporary hook to view failing gpgtar test output on build daemons since i can't replicate the failures on my own build systems.
      trying again to get a proper dump of the gpgtar.test.log. sigh.
      disable gpgtar, since it is causing unpredictable testsuite failures and we don't ship it anyway.
      taking over gpgv-udeb from gnupg 1.4.x packaging
      debian/control: use secure transport for Vcs-* and Homepage
      avoid FTBFS with patch from upstream (Closes: #814842)
      bumped standards-version to 3.9.7 (no changes needed)
      build out-of-tree for cleanliness
      avoid failures on win32 when gpgconf.exe is not present (from upstream)
      adopt gpgv-win32 from the 1.4 packaging
      try to force libiconv for win32
      borrow regression tests as well
      port tests to gpg2
      enable tests to work on amd64
      avoid trying to strip gpgv.exe if it is not present (e.g. arch-dependent builds)
      avoid trying to use help2man on non-existent binaries
      avoid build failures when building only arch-dependent or only arch-independent packages.
      more cleanup on arch-dependent packages.
      re-indent debian/tests/gpgv-win32
      enable test to run as non-root on systems that are already setup with wine32
      dh_strip does not get called on architecture-independent builds, but we need to strip anyway for win32
      refresh patches from gbp pq
      have some manpages to ship when cross-compiling
      hand-craft the manpages upstream doesn't ship
      updated debian/watch to version 4
      fix the patch that avoids describing a build from git as a beta
      prepare changelog for new experimental release
      https://bugs.debian.org/730846 is supposed to be fixed already
      prepare upload to unstable
      simplified xsession startup
      drop renumbering patch
      Ship dedicated binaries in /usr/lib/gnupg instead of /usr/lib/gnupg2
      move names in .manpages files
      renaming packages
      add symlinks for {gnupg,gpgv}2 dummy transitional packages
      tell gnupg that it will be gpg, not gpg2
      switching over binary package names in experimental
      try to use proper names
      added --enable-gpg2-is-gpg to all build variants
      upstream ships the manpages with the wrong name; work around that
      ship lspgpot, gpg-zip, and gpgsplit in gnupg
      scdaemon takes over udev rules from gnupg 1.4 packaging
      Add migrate-pubring-from-classic-pgp, NEWS, and README.Debian
      document migrate-pubring-from-classic-gpg
      updated debian/changelog
      try to avoid importing things that are going to be autoreconfed anyway
      wrap-and-sort
      actually ship manpage for migration script
      Merge tag 'upstream/2.1.12' into experimental
      start to prepare for experimental release
      we do not need iconv for win32 builds any more
      drop patches already applied or otherwise addressed upstream
      refresh patches
      more cleanup related to upstream fixes
      build gnupg-module-overview.png and ship it
      bumped Standards-Version to 3.9.8 (no changes needed)
      upstream now avoids the gpgtar test when gpgtar isn't built
      simplify the shipping of gpgv.exe
      remove workaround that printed results of gpgtar.test
      use standard dh to ship Xsession.d script
      include two simple fixes from upstream
      document gpgv --weak-digest in --help
      Merge tag 'upstream/2.1.13' into experimental
      dropping upstream patches already applied
      import upstream patch
      rely entirely on gpgconf for socket paths instead of trying to figure them out manually
      move to newer libusb to enable smartcards
      preparing for 2.1.13
      brown paper bag time: fix build-dep from libusb-1.0.0-dev to libusb-1.0-0-dev
      pull bugfixes from upstream
      create systemd user mode services for gpg-agent, dirmngr, and scdaemon
      gnupg-agent now Provides: gpg-agent to work around a common confusion
      update dirmngr package description
      prepare new upload to experimental
      enable win32 packages to be built on non-x86 platforms
      make Recommends: strictly versioned between gnupg and {gpg-agent,dirmngr}
      make gnupg Provide: gpg and mention it in the package description
      drop mention of newpg, which has not been in debian for many releases
      gnupg2 2.0.18 predates debian wheezy, which is oldstable; drop mention in debian/control
      drop Suggests: gnupg-doc, which does not appear to be maintained
      drop all references to gpg-idea, which has not been in debian for several releases
      removed dependency on "dpkg (>= 1.15.4) | install-info", since that dpkg version predates oldstable (wheezy)
      prepare another experimental release
      Merge tag 'upstream/2.1.14' into experimental
      drop patches already upstream
      update build-deps
      added TinySCHEME copyright and licensing info
      avoid disabling gpgtar during the standard build because it appears to be necessary for the test suite
      use "wrap-and-sort -as" since it makes future diffs even cleaner
      upstream no longer ships com-certs or qualified.txt
      preparing release of 2.1.14
      mark the gpgv binary as Priority: important, since apt depends on it
      import a bunch of fixes from upstream
      include permissioning on patched-in tests
      Breaks: some packages that expect old gpg behavior (Closes: #831500)
      remove scdaemon.service; it will be managed by gpg-agent.service
      avoid bulleted items in debian/NEWS (thanks, Lintian!)
      debian/copyright: cleanup, fix URLs
      debian/control: use standard URL for Vcs-Browser
      fix spelling and grammar noticed by lintian
      avoid lintian notes about a misspelled "written"
      clean up gpgv2 Description
      break out arch-indep localization files into new gnupg-l10n package
      prepare 2.1.14-2 release
      cleanup debian/copyright
      update debian/watch
      prepare new release
      add ZeitControl card (Closes: #814584)
      three more fixes from upstream
      prepare another release
      actually ship /usr/share/doc/gnupg/README.Debian
      prepare new release
      Merge tag 'upstream/2.1.15'
      avoid libusb on hurd.  Thanks, Pino Toscano! (Closes: #834533)
      permissions on test suite are already fixed
      drop patches applied upstream and refresh remaining patches
      make gnupg2 reproducible by not regenerating documentation date
      modern gpgv breaks older python-debian (Closes: #835349)
      make autopkgtest work with modern wine (Closes: #835976)
      wrap-and-sort -ast for cleaner diffs
      gnupg Breaks: php-crypt-gpg <= 1.4.1-1 (addresses #835592)
      gnupg Breaks: python-apt <= 1.1.0~beta4 (addresses: #835465)
      gnupg Breaks: python-gnupg << 0.3.8-3 (addresses: #834514, #834600)
      gnupg Breaks: libgnupg-interface-perl << 0.52-3 (addresses: #834281)
      gnupg Breaks: libmail-gnupg-perl <= 0.22-1 (addresses: #835075)
      gnupg Breaks: libgnupg-perl (<< 0.19-1) (addresses: #834522)
      prepare new upstream release
      thanks, Lintian!
      ignore upstream gnupg.info, since we will rebuild it anyway
      restore keyid output in gpgv (Closes: #836144)
      avoid test suite failures when HOME does not exist
      prepare new release
      Use upstream fix to avoid touching homedir during test suite
      backward compatibility for preset-passphrase and protect-tool
      add Breaks: for python3-apt too (thanks, Harald Jenny!)
      Avoid network access during tests (Closes: #836259)
      more patches from upstream
      prepare new release
      update debian/tests/gpgv-win32
      more patches from upstream (Closes: #838153)
      tighten dependencies between gnupg and dirmngr (Closes: #834602)
      updated systemd user gpg-agent units for socket activation
      prepare release
      added udev rules for Fujitsu Siemens cardreader (Closes: #840312)
      mark transitional packages Multi-Arch: Foreign (closes: #840258)
      make gnupg2 binNMU-safe
      more patches from upstream
      track upstream decision-making about gpg-agent socket names
      prepare new release
      more upstream patches (Closes: #841437, #840680)
      prepare new bugfix release
      more upstream patches
      dirmngr systemd user service is now socket-activated.
      prepare release
      rename gpg-agent-restricted.socket to gpg-agent-extra.socket
      prepare release
      add some import-options for better migration
      Introduce gpgv-static package (Closes: #806940)
      Build-depend on adns for better DNS resolution in dirmngr
      Set simple and easy defaults for keyservers
      reorganize some patches to distinguish them from upstream
      more fixes from upstream
      Help dirmngr and gpg-agent idle better by default
      prepare release
      Merge tag 'upstream/2.1.16'
      drop patches incorporated upstream
      refresh patches to improve idling behavior of gpg-agent and dirmngr
      prepare new release
      clean up debian/copyright
      clean up generated .info files
      switch to using systemd user service files shipped upstream
      import patch from upstream
      avoid using adns due to lack of security support (Closes: #845078)
      improve documentation about dirmngr --homedir
      remove -pie from hppa build of gpgv-static (Closes #846889)
      import several upstream bugfix patches (Closes: #846834)
      avoid -pie for gpgv-static on kfreebsd-amd64 and x32 as well
      link gnupg-agent and scdaemon with Enhances/Suggests (Closes: #833518)
      prepare debian release
      use larger secmem for gpg-agent (Closes: #846953)
      Merge tag 'upstream/2.1.17'
      set up new changelog entry.
      refresh patches (dropping those applied upstream already)
      adns is no longer used upstream, drop explicit disabling
      remove no-longer-valid dns-srv configure option
      disable-libdns when minimizing linkage
      canonicalize *.install files with wrap-and-sort.ast
      document copyright for new embedded libdns
      look for updates in gcrypt archive, not on user-facing webpage.
      cherrypick patches from upstream
      prepare debian release
      more bugfixes from upstream
      more minor fixes from upstream
      prepare debian release
      still more patches from upstream
      resolve ambiguity in aliased options and commands (Closes: #850475)
      auto-enable gpg-agent and dirmngr for systemd user sessions
      enable easy reloads from systemd
      prepare debian release
      more fixes from upstream (improving on but not yet closing: #849845)
      adopt suggestion from gniibe related to #841143
      prepare a debian release
      Upstream patches, fixing unnecessary delay (Closes: #851298)
      gpg-agent: avoid race in shutdown (Closes: #841143)
      improve dirmngr, gpg-agent README.Debian (Closes: #850982)
      clean up gpg-agent-idling patch
      prepare debian release
      update systemd integration documentation
      encourage libpam-systemd to create and manage the user session
      Merge tag 'upstream/2.1.18'
      remove patches already upstream
      refresh debian/patches
      prepare debian release
      correct header in gnupg-agent.NEWS
      pull fixes from upstream (including a double-free in gpg-agent)
      prepare debian package
      fix searches for keys with raw addr-spec
      prepare another debian release
      document that debian disables --allow-version-check
      docs, debugging, and bugfix patches from upstream (Closes: #852979)
      prepare debian release
      use simpler and more direct gpgconf invocations for socket names
      clean up sc patch
      prepare new debian release
      prepare debian release
      scdaemon fixes from gniibe
      Merge tag 'upstream/2.1.19'
      add logcheck filters for gpg-agent (Closes: #856438)
      drop patches already applied upstream
      refresh patches
      import bugfixes and better testing from upstream
      more bugfix patches from upstream
      prepare 2.1.19 for experimental
      more patches from upstream (Closes: #854829)
      more patches from upstream
      add verbose=3 to the test suite as requested by upstream
      prepare new debian release for new logs from the buildds
      more patches from usptream
      prepare new debian release
      clean up patch topic names for easier legibility
      Merge tag 'upstream/2.1.20' into experimental
      drop patches already upstream
      refresh patches
      import post-release bugfixes from upstream
      prepare debian release
      more bugfix patches from upstream
      prepare new debian release
      more upstream bugfixes (Closes: #858400)
      prepare another debian release
      avoid shipping or trying to use .skel files
      more bugfixes from upstream
      skip missing signing keys (Closes: #834922)
      prepare debian experimental release
      more bugfix patches from upstream
      use the upstream-adopted skeleton file removal
      use available smartcard when signing
      prepare new debian experimental release
      complete removal of .skel files
      Merge tag 'upstream/2.1.21' into experimental
      drop patches already upstream
      more patch cleanup
      bugfixes from upstream
      prepare debian release
      replace links to bugs.gnupg.org with dev.gnupg.org
      fix speling
      writen was removed upstream in 34199ef677bb40eadf0da696a111f7036bc3187e
      more upstream bugfix and cleanup patches
      rename wks packages to match the tools
      prepare debian release
      include upstream bugfixes and improvements (Closes: #863221)
      Add gpgcompose package
      more patches from upstream
      upgrade to debhelper 10
      upgrade to Standards-Version 4.0.0 (no changes needed)
      prepare debian release
      import upstream improvements to gpgcompose
      added gpgconf package
      move KEYSERVER documentation into dirmngr
      break out gnupg-utils package
      rename gnupg-agent to gpg-agent
      move gpg-connect-agent into gpgconf
      move symcryptrun from gpg-agent to gnupg-utils package
      break out a distinct "gpg" package
      remove explicit build-depends on dh-autoreconf (since it is covered by dh 10)
      ensure list is properly indented (thanks, lintian!)
      Mark USB smartcard readers as belonging to the USB subsystem
      More tweaks to the package dependency graph
      scdaemon: added appstream metainfo about supported smartcards
      prepare debian release
      Updated version 2.1.22 from 'upstream/2.1.22'
      drop upstream patches already applied
      refresh patches
      import bugfixes from upstream
      simplify systemd user services
      prepare debian release to experimental

David Prévot (13):
      Update POT and PO files
      Ensure the translations get rebuild
      Update French translation
      Update Ukrainian translation
      Update German translation
      Update Danish translation
      Update Japanese translation
      Update Chinese (traditional) translation
      Update Russian translation
      Update Polish translation
      Update Spanish translation
      New Dutch translation
      Update changelog for 2.0.26-4 release

Eric Dorland (172):
      cp gnupg2 into trunk
      import gnupg2 1.9.20-1.1
      take over, fix for CVE-2006-3746
      make rules executable
      initial import of gnupg 1.9.22
      readd debian dir
      Load . into trunk/gnupg2.
      gnupg2 1.9.93
      gnupg2 1.9.94
      gnupg 2.0.0
      remove some unneeded files
      fix info, remove point-to-info.1
      finalise changelog
      dh_install instead of dh_movefiles
      rules fixup
      remove pkglibdir
      another tweak
      fix space detection
      install pcsc-wrapper in libexec
      remove silly version file
      tweak build-deps
      fix up the paths to some utility programs
      update standards-version
      remove dev warning
      fix missing replaces
      remove unnecessary dependencies
      generate gnupg2.info from gnupg.texi
      temporarily finalise
      run makeinfo manually
      finalise and add bug number
      initial import of gnupg2 2.0.1
      gnupg 2.0.2
      import gnupg2 2.0.3
      import gnupg2 2.0.3
      gnupg 2.0.4
      add watch file
      Merge branch 'upstream'
      Merge branch 'upstream'
      * New upstream release.
      * docs/scdaemon.texi: Remove old --print-atr documentation. Thanks
      * The "Ubuntu, I would have done it had you only asked" release.
      Merge branch 'upstream'
      * New upstream release. (Closes: #437289)
      Merge branch 'upstream'
      * New upstream release.
      Don't run make check, it's broken.
      * debian/watch: Use passive ftp, ftp.gnupg.org doesn't seem happy
      Merge branch 'upstream'
      * New upstream release. (Closes: #428635)
      * debian/rules: Don't ignore status of make distclean, just check for
      Merge branch 'upstream'
      New upstream release. Fixes CVE-2008-1530, Key import memory corruption.  (Closes: #472928)
      Add recommends on gnupg-agent.
      Fix FTBFS with gcc 4.3.
      Depend on pinentry instead of recommend, and make pinentry-gtk2 first.
      Finalize changelog
      Merge branch 'patch/gpgkey2ssh-fix'
      Urgency medium to try to beat the release.
      debian/control: Make the description a little more distinctive than gnupg v1's. Thanks Jari Aalto. (Closes: #496323)
      Merge branch 'upstream'
      New upstream release. (Closes: #496663)
      debian/control: Change build dependency on gs to ghoscript, since ghoscript has been replaced.
      Merge branch 'upstream'
      New upstream release. (Closes: #499569, #463270, #446494, #314068,  #519375, #514587)
      debian/compat: Use debhelper v7.
      debian/control: Update Standards-Version to 3.8.2.
      debian/control: Use ${misc:Depends}.
      Remove unnecessary patches
      Override pkgdatadir so that it points to /usr/share/gnupg2.
      Merge branch 'upstream'
      New upstream release.
      debian/control: Depend instead of Recommend gnupg-agent. (Closes: #538947)
      debian/control: Build depend on libreadline-dev instead of libreadline5-dev, since libreadline6-dev is out.
      Merge branch 'upstream'
      New upstream release.
      debian/source/format, debian/source/options, debian/source/patch-header: Convert to v3 quilt format, with single-debian-patch.
      debian/control: Tighten dependency on gnupg-agent. (Closes: #551792)
      Finalize changelog
      debian/*.lintian, debian/*.lintian-overrides, debian/rules: Rename lintian files and use dh_lintian instead of shell snippets.
      debian/source/patch-header, debian/source/options: Delete patch header and remove single-debian-patch option.
      debian/patches/01-gnupg2-rename.diff: Move patch to do the necessary renaming of gnupg -> gnupg2 in a quilt patch.
      debian/patches/02-encode-s2k.diff: Added patch to fix passphrase problem in gpgsm. Thanks Martijn van Brummelen for the NMU to fix this problem in 2.0.14-1.1.
      debian/patches/03-gpgsm-realloc.diff: Fix for "Realloc Bug with X.509 certificates" for gpgsm. (Closes: #590122)
      debian/rules, debian/control: Use dh-autoreconf and autopoint to regenerate autotools files at build time.
      Remove config.guess and config.sub from master branch to be in sync with upstream
      Merge branch 'upstream'
      New upstream release. (Closes: #584316, #603985, #603983, #603984)
      debian/patches/02-encode-s2k.diff, debian/patches/03-gpgsm-realloc.diff, debian/patches/series: Drop now unneeded security patches.
      debian/rules, debian/patches/01-gnupg2-rename.diff, debian/gnupg2.info, debian/gnupg2.install: No need to rename the info file anymore.
      debian/patches/01-gnupg2-rename.diff: Rename the autoconf package for better renaming of pkg directories. (Closes: #579006)
      debian/control, debian/compat: Upgrade to debhelper level 8.
      debian/control: Upgrade Standards-Version to 3.9.1.
      debian/control: Update Build-Depends versions for the latest release.
      debian/gnupg2.install: Add the applygnupgdefaults command. (Closes: #567537)
      debian/gnupg2.docs: doc/faq.html no longer exists.
      debian/control: Add dependency on dpkg (>= 1.15.4) | install-info for info install trigger.
      debian/control, debian/rules: Use debian build hardening.
      debian/rules: Convert the rules file to use the lovely dh format.
      debian/gnupg2.dirs, debian/gnupg-agent.dirs, debian/gpgsm.dirs: Remove unless dirs files.
      debian/gnupg-agent.lintian-overrides, debian/gnupg2.lintian-overrides, debian/gpgsm.lintian-overrides: Remove unneeded lintian-overrides files.
      Merge branch 'upstream'
      New upstream release.
      debian/copyright: Update ftp location. (Closes: #624404)
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/control, debian/gpgsm.install, debian/scdaemon.install: Add a separate package for the scdaemon. (Closes: #416129)
      debian/control, debian/gpgsm.install, debian/gnupg2.install, gnupg-agent.install: Move gpg-preset-passphrase and gpg-protect-tool into the gnupg-agent.
      debian/control: Upgrade Standards-Version to 3.9.2.
      debian/rules: Install ChangeLog for new scdaemon package.
      debian/control: Add Multi-Arch: foreign to all packages.
      Merge branch 'upstream'
      New upstream release.
      debian/rules: Update ChangeLog locations.
      debian/control: Use canonical addresses for VCS.
      debian/control: Fix scdaemon short description.
      debian/patches/02-cve-2012-6085.diff: Patch from upstream to fix CVE-2012-6085, "gnupg key import memory corruption". (Closes: #697251)
      Merge tag 'upstream/2.0.20'
      New upstream release.
      debian/patches/02-cve-2012-6085.diff: Remove, merged upstream.
      debian/control: Upgrade Standards-Version to 3.9.4.
      debian/compat, debian/control: Upgrade to debhelper v9.
      debian/control, debian/rules: Drop hardening-wrapper, now that we use debhelper v9.
      debian/scdaemon.install: scdaemon has moved under $libexecdir.
      debian/control: Tighten dependency on scdaemon.
      Add bugs closed in 2.0.20
      debian/rules: Turn on al hardening options.
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/gnupg-agent.install, debian/gnupg2.install, debian/scdaemon.install: Fix /usr/lib paths for multi-arch.
      debian/rules: Pass ${pkglibdir} to --libexecdir since dh v9 passes ${libdir} by default.
      Merge tag 'upstream/2.0.21'
      New upstream release. (Closes: #613465, #713287)
      debian/patches/01-gnupg2-rename.diff: Refresh patch.
      debian/control: Fix Vcs-Git path.
      debian/control: Now depends on libgpg-error >= 1.11.
      debian/control: Build-Depends on automake1.11 since the test suite
      debian/control: Also need a Build-Conflicts on automake (<= 1.12).
      debian/rules, debian/gnupg2.install: Switch libexecdir to /usr/lib/gnupg2 to install helper binaries to a non-multiarch specific location. (Closes: #717303)
      debian/control, debian/gpgv2.install: Split out gpgv2 into its own package.
      debian/control, debian/gnupg2.install, debian/kbxutil.1: Add rule and manpage for kbxutil using help2man.
      debian/patches/02-gpgv2-dont-link-libassuan.diff: Don't link gpgv2 against libassuan as it's not used.
      Fix libexec paths
      Add proper Conflicts and Replaces for gpgv2.
      debian/rules: Install changelog for gpgv2.
      Merge tag 'upstream/2.0.22'
      New upstream version. Fixes CVE-2013-4402. (Closes: #725433)
      debian/patches/03-fix-empty-usage-flags.diff: Patch for CVE-2013-4351. (Closes: #722724)
      New upstream version. Fixes CVE-2013-4402 and CVE-2013-4351. (Closes: #725433, #722724)
      debian/gnupg2.install: Install gnupg-card-architecture.png for the info file.
      debian/control: Fix Build-Conflicts on newer automakes. Thanks Chris Boot. (Closes: #726015)
      debian/control: IDEA is no longer patented, drop its metion from the description. Thanks brian m. carlson. (Closes: #726139)
      debian/rules: Disable the test suite on mips and mipsel to work around Bug:#730846.
      debian/watch, debian/upstream-signing-key.gpg: Add upstream signing key for uscan verification.
      debian/kbxutil.1, debian/rules: Add better description and regenerate the manpage.
      debian/control: Remove version on gpg-idea conflict, add missing Breaks for gpgsm and convert Conflicts to Breaks for gpgv2.
      debian/control: Move gnupg-agent to Depends for gpgsm instead of Replaces (which in turn should have been Recommends).
      debian/control: Standards-Version to 3.9.5.
      debian/copyright: Switch to a shiny DEP-5 copyright file.
      Fix upstream-signing-key extension
      Merge tag 'upstream/2.0.23'
      New upstream release.
      debian/upstream/signing-key.asc: Rename upstream-signing-key.pgp to the new, supported name.
      debian/control: Restore versioned conflict against gpg-idea. (Closes: #733984)
      debian/control: Add Recommends on dirmngr for gpgsm. (Closes: #683579)
      Merge tag 'upstream/2.0.24'
      New upstream release. Fixes CVE-2014-4617 "infinite loop when decompressing data packets". (Closes: #752498)
      debian/patches/02-gpgv2-dont-link-libassuan.diff: Drop, now upstreamed.
      Merge tag 'upstream/2.0.25'
      New upstream release.
      debian/control: Switch to libgcrypt20-dev (aka 1.6 release).
      Merge tag 'upstream/2.0.26'
      New upstream release.
      debian/control: Suggest parcimonie. Thanks ilf. (Closes: #752261)
      debian/patches/0003-Include-defs.inc-in-BUILT_SOURCES.patch: Fix for build failure when rebuilding info docs.

NIIBE Yutaka (5):
      update scdaemon dependencies
      scdaemon bugfixes
      scdaemon.udev: Add Yubikey and Nitrokey (Closes: #648331, 734889).
      scdaemon fix for PC/SC (Closes: #852702, #854005, #854595, #854616).
      scdaemon: Fix duplicated entries (Closes: #855056).

Stefan Bühler (1):
      Create WKS server and client packages

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  99e6835   Post release updates
       new  386a7bb   tests: Configure the environments to use scdaemon from build tree.
       new  a8dd968   g10: Suppress error for card availability check.
       new  ae95a7f   g10: Fix gpgcompose.c.
       new  0e1729b   tests: Fix agent teardown in release builds.
       new  aae50e0   gpgscm: Fix checking for opcode arguments.
       new  705da1e   docs: Point to https://dev.gnupg.org/ .
       new  3713f67   doc: Fix spellings.
       new  fbb2259   g10: Fix default-key selection for signing, possibly by card.
       new  509e4a4   agent: Add const qualifier for read-only table.
       new  0c62832   Register DCO for William L. Thomson Jr.
       new  3ac1a9d   common: Support different digest algorithms for ssh fingerprints.
       new  3a07a69   common: Correctly render SHA256-based ssh fingerprints.
       new  a5f046d   agent: Write both ssh fingerprints to 'sshcontrol' file.
       new  525f2c4   agent: Make digest algorithms for ssh fingerprints configurable.
       new  b5f356e   dirmngr: Re-init libdns resolver on towel change of resolv.conf
       new  de3a098   dirmngr: This towel should better detect a changed resolv.conf.
       new  9965446   agent: Fix memory leaks.
       new  d3d640b   gpg: Disable keydb handle caching
       new  663e5ed   gpg: Fix typos.
       new  5c33649   scd: Handle a failure of libusb_init.
       new  8defb21   scd: Fix error code on failure at usb_init.
       new  c03e0eb   agent: Fix error from do_encryption.
       new  485b5a6   doc: Improve documentation.
       new  30c71a9   sm: Fix typo.
       new  f9cb15b   sm: Simplify code.
       new  02af509   gpg: Fix compliance computation.
       new  8a01228   gpg,common: Move the compliance framework.
       new  3b70f62   common: Improve checking for compliance with CO_DE_VS.
       new  be8ca88   gpg: Report compliance with CO_DE_VS.
       new  216f080   common,g10: Fix typos.
       new  96acbdd   speedo: Fix source tar call ambiguity
       new  13dc75a   speedo: Fix a minor memleak in the installer
       new  027ce4b   gpg: Improve compliance with CO_DE_VS.
       new  842d233   common,gpg,sm: Move the compliance option parser.
       new  f440cf7   common,gpg: Move the compliance option printer.
       new  21fc250   common,gpg,sm: Initialize compliance module.
       new  e051e39   common: Add cipher mode to compliance predicate.
       new  17e5afd   gpg: Avoid failure exit when scdaemon is disabled but not needed.
       new  5b9025c   dirmngr: Allow a timeout for HTTP and other TCP connects.
       new  9b43220   dirmngr: Implement HTTP connect timeouts of 15 or 2 seconds.
       new  b03fab0   gpg: Fix computation of compliance with CO_DE_VS.
       new  a64a55e   common,gpg,sm: Restrict the use of algorithms according to CO_DE_VS.
       new  bc5503b   artwork: Add new banner.
       new  8a90668   gpg: Remove dead code.
       new  4ddf4e1   gpg: Support 'gpgcompose --encrypted-pop --help'
       new  cb0484e   gpg: Improve some output of gpgcompose.
       new  7aeac20   gpg: Send gpgcompose --help output to stdout, not stderr.
       new  7c91b48   common: Fix -Wswitch warning.
       new  a36c48a   po: Make a string translatable.
       new  e809251   gpg: Disable keydb handle caching only for W32
       new  15d2a00   dirmngr: Implement querying nameservers over IPv6.
       new  8095d16   gpg: Refactor keyedit module.
       new  404fa82   gpg: Refactor key checking and fixing.
       new  9b12b45   gpg: Check and fix keys on import.
       new  6e23416   gpg: Disable compliance module for other GnuPG components.
       new  3419a33   Change license of some files to LGPLv2.1.
       new  b766d3d   tests: Run the OpenPGP tests using the new extended key format.
       new  4c8be58   gpgscm: Improve error reporting.
       new  6639aed   gpgscm: Improve error handling of foreign functions.
       new  e555e7e   gpgscm: Improve option parsing.
       new  61ef435   gpgscm: Limit the number of parallel jobs.
       new  6cc4702   indent: Always use "_(" and not "_ (" to mark translatable strings.
       new  3621dbe   gpg,gpgsm: Fix compliance check for DSA and avoid an assert.
       new  badc1cd   gpg: Fix error handling.
       new  794261c   dirmngr: Fix typo.
       new  fc4834d   dirmngr: Refactor variable-sized array code.
       new  48aae81   dirmngr: Properly handle SRV records.
       new  890a3a7   gpg: Fix printing keyserver URLs and notation data.
       new  62274d3   tests: Add test for gpgv.
       new  a68a982   gpg: Close cached keydb handle in gpgv.
       new  e0877a9   indent,i18n: Make some new strings translatable.  Wrap too long lines.
       new  f31dc25   gpg,gpgsm: Emit status code ENCRYPTION_COMPLIANCE_MODE.
       new  815ecdf   build: Add missing LIBASSUAN_CFLAGS to dirmngr/.
       new  1ead1ca   agent: Shutdown on removal of the home directory.
       new  b49b1a8   tests: Improve test.
       new  2739647   agent: Support unprotected ssh keys.
       new  ecd6c01   agent: Fix option --debug-wait
       new  7fb724c   doc: Document obsolete option in gpgsm.  Closes T2231.
       new  f6faa05   doc: Prefer an installed version of yat2m
       new  139de02   doc: Update yat2m to take care of SOURCE_DATE_EPOCH.
       new  3681ee7   agent: Use MAX_PASSPHRASE_LEN (255) also for the loopback.
       new  4538f3c   doc: minor clarification
       new  4c3a59e   doc: Fix typo.
       new  243b2a5   doc: Improve TOFU documentation.
       new  1455b40   speedo: Provide a vagrantfile to test speedo in an isolated VM.
       new  d245949   tofu: Compare squares instead of square roots.
       new  957f8eb   dirmngr: Fix license note in server.c
       new  bce02a8   gpgscm: Make it impossible to catch '*interpreter-exit*'.
       new  f78fe1a   gpgscm: Make loading of modules less verbose.
       new  877a321   doc: Document gnupg version requirement for gpg-preset-passphrase.
       new  fa1155e   gpg: New option --key-origin.
       new  330212e   gpg: Pass key origin values to import functions.
       new  956da89   gpg: Fix importing keys.
       new  7a6e6ad   gpgscm: Fail early if the test setup fails.
       new  b4d2508   gpgscm: Library improvements.
       new  58eafd1   tests: Improve 'shell.scm' script.
       new  8494678   common: New function split_fields_colon.
       new  bbbd0db   agent: New GETINFO sub-command jent_active.
       new  a149afe   gpg,sm: Check compliance of the RNG.
       new  3d670fa   dirmngr: Fix memory leak.
       new  ebb35ed   dirmngr: Fix memory leak.
       new  b231959   dirmngr: Honor http keyserver URLs.
       new  2e1342b   gpgscm,w32: Fix testing for absolute paths.
       new  f17862d   common: Allow abbreviations of standard options.
       new  fa63db8   Fix usage of ARGPARSE_OPTS.
       new  9979118   gpgconf: Make vars read-only explicitly.
       new  73d4781   dirmngr: Fix handling of proxy URIs.
       new  46a4a0c   dirmngr: Fix connecting to http proxies.
       new  1ba220e   dirmngr: Amend TLS handling.
       new  e7eabe6   dirmngr: Log http response in debug mode.
       new  da91d21   dirmngr: Implement TLS over http proxies.
       new  2e54594   gpg: Avoid asking by fpr and then by keyid during auto-key-retrieve.
       new  e7fc6e3   dirmngr: Forbid redirects from .onion to clearnet URIs.
       new  cc12cf3   dnsmngr: Fix use of CPP.
       new  84146b3   common: logstream fix.
       new  69614d5   scd: Support longer data length for special DOs for v3 card.
       new  9998b16   g10: Return proper error when gpg-agent fails to start during probe.
       new  3ee314d   gpg: Make function mk_datestr public.
       new  33ecb54   doc: Comment fixes and one trailing comma fix.
       new  bddc2e0   common: New function print_utf9_string.
       new  165cdd8   gpg: New option --with-key-origin.
       new  a5dcc01   indent: Improve readability of some comments in getkey.c
       new  cea4313   doc: Clarify wording of export-attributes.
       new  892e86b   scd: Add debug message for v3 card.
       new  a76b6cf   g10: Don't limit at the frontend side for card capability.
       new  d8a55da   scd: Fix SEGV in CCID driver.
       new  609bbdf   g10: Clean keyblock on initial commit.
       new  5818ff0   gpg: Use macros to check the signature class.
       new  e888f7a   gpg: Fix possible double free of the card serialno.
       new  b55b72b   gpg: Extend --quick-set-expire to allow subkey expiration setting.
       new  e4c720f   g10: Avoid caching passphrase for failed symmetric encryption.
       new  328fca1   agent: Minor fix for Windows.
       new  2746028   dirmngr: Minor fix for Windows.
       new  789401e   dirmngr: More minor fixes.
       new  ade4b27   dirmngr: More minor fix.
       new  45e4048   scd: Use unsigned int for fields.
       new  5dac85f   doc: Revert the bug reporting address to bugs.gnupg.org
       new  d8e46f1   g10: Make sure to emit NEED_PASSPHRASE on --export-secret-key.
       new  78ebc62   w32: Change directory on daemon startup.
       new  872137b   g10: Make sure to emit NEED_PASSPHRASE on --import of secret key.
       new  9b88cfa   dirmngr: New function dirmngr_status_printf.
       new  e975482   dirmngr: Print a SOURCE status for WKD requests.
       new  f6f0dd4   gpg: Filter keys received via DANE
       new  e7068bf   gpg: Store key origin info for new DANE and WKD retrieved keys.
       new  2ca0381   gpg: Store key origin info for new keys from a keyserver
       new  87b5421   gpg: Extend --key-origin to take an optional URL arg.
       new  aa358ac   doc: Use @var for meta variables in gpg.texi
       new  d40b4a4   dirmngr: Add annotation for fallthrough.
       new  84c993d   gpg: Store key origin for new userids during import merge.
       new  166d0d7   gpg: Update key origin info during import merge.
       new  f2d2648   Revert "w32: Change directory on daemon startup."
       new  226f143   common: New functions gnupg_daemon_rootdir and gnupg_chdir.
       new  0ef5034   w32: Also change the directory on daemon startup.
       new  24c7aa0   common: Strip trailing slashes from the homedir.
       new  f4ec769   agent: Lengthen timertick interval on Unix to 4 seconds.
       new  d50c2ef   agent,dirmngr: Check for homedir removal also using stat(2).
       new  fd68bdb   dirmngr: Auto-enable Tor on startup or reload.
       new  c5e5748   dirmngr: Do not use a blocking connect in Tor mode.
       new  4f569c6   doc: Update vsnfd profile example
       new  b428dd4   wks: Add stubs for new gpg-wks-server commands.
       new  c76398d   wks: Fix program names in the usage diagnostics.
       new  be636c3   doc: Add man pages form gpg-wks-server and gpg-wks-client.
       new  94eea0e   g10: Make sure exactly one fingerprint is output with --quick-gen-key.
       new  fcb62fe   gpg: Avoid output to the tty during import.
       new  6d95611   indent: Wrap an overlong line.
       new  a0d0cbe   gpg,sm: Fix compliance checking for decryption.
       new  1bd22a8   gpg,sm: Allow encryption (with warning) to any key in de-vs mode.
       new  6502bb0   gpg: Tweak compliance checking for verification
       new  5516ef4   agent: Minor cleanup (mostly for documentation).
       new  6496dc1   gpg: Fix segv in get_best_pubkey_byname.
       new  1c35e29   gpg: Minor rework for better readibility of get_best_pubkey_byname.
       new  5cf9515   agent: For OCB key files return Bad Passprase instead of Checksum Error.
       new  efe187e   gpg,sm: String changes for compliance diagnostics.
       new  6c9899b   agent: Make --ssh-fingerprint-digest re-readable.
       new  339f672   po: Update German translation
       new  731d7c6   po: Auto-update
       new  7d335ff   Release 2.1.22
       new  8bc0972   New upstream version 2.1.22
       new  587d231   Updated version 2.1.22 from 'upstream/2.1.22'
       new  085e1a4   drop upstream patches already applied
       new  e8e3708   refresh patches
       new  31dc340   import bugfixes from upstream
       new  5cce707   simplify systemd user services
       new  81bfe6e   prepare debian release to experimental

The 185 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-gnupg/gnupg2.git



More information about the Pkg-gnupg-commit mailing list