linux/poky.git/meta/recipes-support/gnupg, branch 5.2_M3

gnupg: upgrade 2.5.3 -> 2.5.4

2025-02-18T12:04:03+00:00

Noteworthy changes in version 2.5.4 (2025-02-12) ------------------------------------------------ * gpg: New option --disable-pqc-encryption. [rG00c31f8b04] * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.[T7506] * gpg: Fix handling with no CRC armor. [T7071] * gpg: New private Kyber keys are now cross-referenced using a new Link attribute. [T6638] * gpg: Fix an import problem with keys having another primary key as a subkey. [T7527] * gpgsm: Allow unattended PKCS#12 export without passphrase. [rG159e801043] * gpgsm: Allow CSR generation with an unprotected key. [rG89055f24f4] * agent: New option --change-std-env-name. [T7522] * agent: Fix ssh-agent's request_identities for skipped Brainpool keys. [rG2469dc5aae] * Do not package zlib and bzip2 object files in a speedo release build. [T7442] See-also: gnupg-announce/2025q1/000490.html Release-info: https://dev.gnupg.org/T7480 https://dev.gnupg.org/source/gnupg/browse/master/NEWS (From OE-Core rev: 59f26c7311ae3d5596f517b739e7c3435db070a3) Signed-off-by: Hongxu Jia Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

gnupg: upgrade 2.5.2 -> 2.5.3

2025-02-05T12:49:55+00:00

(From OE-Core rev: 58c6af60d95c8527b4ac7f80192dd9e14186fc85) Signed-off-by: Richard Purdie

gnupg: remove obsolete patch

2025-01-27T15:47:10+00:00

Remove a patch which is already merged in v2.5.1 See for reference: https://github.com/gpg/gnupg/commit/1d5cfa9b7fd22e1c46eeed5fa9fed2af6f81d34f https://dev.gnupg.org/T7193 (From OE-Core rev: 79c10b2ad17bacec024427693eb025659f455a20) Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie

gnupg: upgrade 2.5.1 -> 2.5.2

2024-12-12T12:52:39+00:00

0001-fix-compile-failure-with-musl.patch relocate.patch refreshed for 2.5.2 Changelog: ============ * gpg: Add option 16 to --full-gen-key to create ECC+Kyber. * gpg: For composite algos add the algo string to the colons listings. * gpg: Validate the trustdb after the import of a trusted key. * gpg: Exclude expired trusted keys from the key validation process. * gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key. * gpg: Retain binary representation for import->export with Ed25519 key signatures. * gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo. * gpg: Avoid a failure exit code for expired ultimately trusted keys. * gpg: Emit status error for an invalid ADSK. * gpg: Allow the use of an ADSK subkey as ADSK subkey. * gpg: Fix --quick-set-expire for V5 subkey fingerprints. * gpg: Robust error handling for SCD READKEY. * gpg: Fix cv25519 v5 export regression. * gpgsm: Nearly fourfold speedup of validated certificate listings. * gpgsm: Improvement for some rare P12 files. * gpgsm: Terminate key listing on output write error. * agent: Add option --status to the LISTRUSTED command. * agent: Fix detection of the yet unused trustflag de-vs. * agent: Allow ssh to sign data larger than the Assuan line length. * keyboxd: Fix a race condition on the database handle. * dirmngr: A list of used URLs for loaded CRLs is printed first in the output of the LISTCRL command. * scd: More mitigations against lock ups with multiple cards or apps. * gpgtar: Use log-file from common.conf only in --batch mode. * gpgtar: Fix directory creation during extraction. * gpg-mail-tube: Minor fixes. * gpgconf: Add list flag to trusted-key et al. * Implement GNUPG_ASSUME_COMPLIANCE envvar and registry key for testing de-vs compliance mode. * Enable additional runtime protections in speedo builds for windows. * Fix a race condition in creating the socket directory. * Fix a build problem on macOS (missing unistd.h). (From OE-Core rev: 2ab817c434ac443e29d66105056675d6256e8a2c) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

gnupg: upgrade 2.5.0 -> 2.5.1

2024-11-29T22:13:25+00:00

Due to upstream [build: Remove configure option --enable-gpg-is-gpg2][1], drop option --enable-gpg-is-gpg2 and remove gpg2/gpgv2 installation Due to upsream [doc: Remove included yat2m and build HTML versions of the man pages.][2], it used standard detection on yat2m other than build it from source. Because no native recipe provide yat2m in Yocto, explicitly disable doc via option --disable-doc [1] https://github.com/gpg/gnupg/commit/2125f228d36c0882a87bce433a18253154653d50 [2] https://github.com/gpg/gnupg/commit/60c541f5880e8c603ca9372d3ca8b7ad68b97018 (From OE-Core rev: 3a00465f4b0c01580fb27e0c462696bd4f840828) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

gnupg: 2.4.5 -> 2.5.0

2024-08-23T21:43:27+00:00

Fix compile failure with musl (From OE-Core rev: e7bcd683365961e661c419e79a4bb641069f2a79) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

gnupg: Document CVE-2022-3219 and mark wontfix

2024-08-15T13:51:55+00:00

(From OE-Core rev: f10f9c3a8d2c17d5a6c3f0b00749e5b34a66e090) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

gnupg: upgrade 2.4.4 -> 2.4.5

2024-04-16T07:07:02+00:00

Changelog: ========== * gpg,gpgv: New option --assert-pubkey-algo. * gpg: Emit status lines for errors in the compression layer. * gpg: Fix invocation with --trusted-keys and --no-options. * gpgsm: Allow for a longer salt in PKCS#12 files. * gpgtar: Make --status-fd=2 work on Windows. * scd: Support for the ACR-122U NFC reader. * scd: Suport D-TRUST ECC cards. * scd: Allow auto detaching of kernel drivers; can be disabled with the new compatibility-flag ccid-no-auto-detach. * scd: Allow setting a PIN length of 6 also with a reset code for openpgp cards. * agent: Allow GET_PASSPHRASE in restricted mode. * dirmngr: Trust system's root CAs for checking CRL issuers. * dirmngr: Fix regression in 2.4.4 in fetching keys via hkps. * gpg-wks-client: Make option --mirror work properly w/o specifying domains. * g13,gpg-wks-client: Allow command style options as in "g13 mount foo". * Allow tilde expansion for the foo-program options. * Make the getswdb.sh tool usable outside the GnuPG tree. (From OE-Core rev: eadaa195c8ded5f74bd7a146840c5dd610cd3c36) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

gnupg: disable tests to avoid running target binaries at build time

2024-02-18T22:02:40+00:00

By default, the tests are built and run at do_compile and we can see errors like below in log.do_compile: gnupg-2.4.4/tests/cms/inittests: line 99: ../../sm/gpgsm: cannot execute binary file: Exec format error Note that the do_compile process still succeeds. However, we'd better avoid executing these target binaries at build time. (From OE-Core rev: 74d48497470ce209bc6bdf49c2e2cfda67dce6ae) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

gnupg: upgrade 2.4.3 -> 2.4.4

2024-02-03T22:08:26+00:00

fix-ldap.patch removed since it's included in 2.4.4. 0001-configure.ac-use-a-custom-value-for-the-location-of-.patch 0004-autogen.sh-fix-find-version-for-beta-checking.patch relocate.patch refreshed for 2.4.4 Changelog: https://dev.gnupg.org/T6578 (From OE-Core rev: 35ad01e17e3ba01f87902ab121247bfa600db225) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie