diff mbox series

[AUH] gnupg: upgrading to 2.5.22 SUCCEEDED

Message ID 010101a05b87569f-8478ceea-a3ca-46bc-b3c4-63ea3d6f4071-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] gnupg: upgrading to 2.5.22 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Sept. 1, 2026, 5:53 a.m. UTC
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *gnupg* to *2.5.22* has Succeeded.

Next steps:
    - apply the patch: git am 0001-gnupg-upgrade-2.5.21-2.5.22.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 993565fb98e7c8edfb84cf6de54388e911e57034 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Tue, 1 Sep 2026 05:44:26 +0000
Subject: [PATCH] gnupg: upgrade 2.5.21 -> 2.5.22

Source: ChangeLog

2026-08-31  Werner Koch  <wk@gnupg.org>

	Release 2.5.22.
	+ commit bd253e9fecedd4c0e699530826ee43264581634b

2026-08-26  Philip Le  <philip.le@gnupg.com>

	gpgsm: Fix condition for de-vs compliance status line.
	+ commit a09f16f2b17a47b3f215e2d257ef256f3b2b724e
	* sm/decrypt.c (gpgsm_decrypt): Also check other conditions for de-vs
	compliance before emitting status line.

2026-08-25  Philip Le  <philip.le@gnupg.com>

	gpgsm: Check keyboxd usage in keydb_get_flags.
	+ commit e338ea3de2d151fe718c11d7dcd2a2178b10a22e
	* sm/keydb.c (keydb_get_flags): Add condition that keyboxd is not
	used.

2026-08-21  Werner Koch  <wk@gnupg.org>

	gpgconf: Print a warning on Windows on insufficent /etc permissions.
	+ commit 56eb3148c7b88eb1c0804141b58cb54b9007f48d
	* README (Securing the global config files on Windows): New.

	* tools/gpgconf.c [W32]: Include aclapi.h.
	(enum cmd_and_opt_values): Add oDebug.
	(opts): Add option --debug.
	(debug_flags): New.
	(main): Parse debug flags.
	(w32_get_file_integrity_level) [W32]: New.
	(show_configs) [W32]: Check permissions of the gloab sysconfdir
	* tools/gpgconf.h (opt): Add field 'debug'.
	(DBG_W32_API): New.

2026-08-18  Philip Le  <philip.le@gnupg.com>

	gpg: Emit status line for failed write.
	+ commit 09ac242827c3bd002da2ff9d693a2db646d4e386
	* g10/plaintext.c (handle_plaintext): Emit error location and code in
	failure status.

2026-08-12  Philip Le  <philip.le@gnupg.com>
	    Werner Koch  <wk@gnupg.org>

	gpg: Fix regression introduced by partial file guards.
	+ commit 1b8debd65baaa05250ce26079fad15ac7bb16bd5
	* g10/main.h (gnupg_rollback_partial_file): New. Removes .part files.
	(gnupg_commit_partial_file): New. Renames .part files.
	* g10/misc.c (gnupg_rollback_partial_file): New.
	(gnupg_commit_partial_file): New.
	* g10/mainproc.c (proc_encrypted): Use gnupg_commit_partial_file.
	* g10/gpg.c (g10_exit): Use gnupg_commit_partial_file.
	(main): Remove .part files if decryption fails.

2026-08-12  NIIBE Yutaka  <gniibe@fsij.org>

	common,gpg: Don't enable the partial file guard if already done.
	+ commit 95ad7f7a5165b96e1a39afe70b1b1092b9ab6f45
	* common/stringhelp.c (has_suffix): New.
	* common/stringhelp.h (has_suffix): New.
	* g10/plaintext.c (get_output_file): Only enable the partial
	file guard when it doesn't have ".part" suffix.

2026-08-10  Werner Koch  <wk@gnupg.org>

	gpg: Fix TOFU trust models to actually check UTK signatures.
	+ commit 08611f5da8ad4b9cc80bb05f0f8610ec6baa6063
	* g10/tofu.c (signed_by_utk): Add arg ctrl.  Use macros fro the
	  sigclass.  Check the signature before returning true.

2026-08-05  Werner Koch  <wk@gnupg.org>

	g13: Add sanity check on the syntax of the dmsetup algo string.
	+ commit 386c3e63b1cac7f506f974715dbf30c6d40663dd
	* g13/sh-dmcrypt.c (is_valid_algostr): New
	(sh_dmcrypt_mount_container): Use here
	(sh_dmcrypt_resume_container): and here.

2026-08-04  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Add a comment and minor fix for composing SEXP.
	+ com

[Changelog truncated as it exceeds 3000 characters;
the full changelog can be found in an attachment to the AUH email]
---
 ...verride-init-is-not-needed-with-gcc-9.patch |  2 +-
 ...e-a-custom-value-for-the-location-of-.patch |  4 ++--
 ...-use-pkgconfig-instead-of-npth-config.patch |  2 +-
 .../recipes-support/gnupg/gnupg/relocate.patch | 18 +++++++++---------
 .../gnupg/{gnupg_2.5.21.bb => gnupg_2.5.22.bb} |  2 +-
 5 files changed, 14 insertions(+), 14 deletions(-)
 rename meta/recipes-support/gnupg/{gnupg_2.5.21.bb => gnupg_2.5.22.bb} (97%)
diff mbox series

Patch

diff --git a/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch b/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
index 7a3fa59c54..52db780959 100644
--- a/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
+++ b/meta/recipes-support/gnupg/gnupg/0001-Woverride-init-is-not-needed-with-gcc-9.patch
@@ -1,4 +1,4 @@ 
-From 46db1301b1b71f47aa131b9a3de9d1cf356cf408 Mon Sep 17 00:00:00 2001
+From 8b7d344ed35bc4bcfa0d531a0885fc1bea01ffda Mon Sep 17 00:00:00 2001
 From: Khem Raj <raj.khem@gmail.com>
 Date: Thu, 20 Dec 2018 17:37:48 -0800
 Subject: [PATCH] Woverride-init is not needed with gcc 9
diff --git a/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch b/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
index 1c7cd7ba7b..04dd45e676 100644
--- a/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
+++ b/meta/recipes-support/gnupg/gnupg/0001-configure.ac-use-a-custom-value-for-the-location-of-.patch
@@ -1,4 +1,4 @@ 
-From fd060f524e50c7c3f8694f71630ac151627235f1 Mon Sep 17 00:00:00 2001
+From f86e7337698debfe5152f4f4bc840bf56f868fab Mon Sep 17 00:00:00 2001
 From: Alexander Kanavin <alex.kanavin@gmail.com>
 Date: Mon, 22 Jan 2018 18:00:21 +0200
 Subject: [PATCH] configure.ac: use a custom value for the location of
@@ -13,7 +13,7 @@  Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/configure.ac b/configure.ac
-index 5ac4d0b..09615c5 100644
+index 9e2a42d..b48b88d 100644
 --- a/configure.ac
 +++ b/configure.ac
 @@ -1909,7 +1909,7 @@ AC_DEFINE_UNQUOTED(GPGCONF_DISP_NAME, "GPGConf",
diff --git a/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch b/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
index f4c9b2161a..7553bd9f3f 100644
--- a/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
+++ b/meta/recipes-support/gnupg/gnupg/0002-use-pkgconfig-instead-of-npth-config.patch
@@ -1,4 +1,4 @@ 
-From b8a99b2d9caa05f54be25635e3b1687753fe7196 Mon Sep 17 00:00:00 2001
+From 3c1d201eace11d557eb6c589842e93b8bacbe8f9 Mon Sep 17 00:00:00 2001
 From: Saul Wold <sgw@linux.intel.com>
 Date: Wed, 16 Aug 2017 11:16:30 +0800
 Subject: [PATCH] use pkgconfig instead of npth config
diff --git a/meta/recipes-support/gnupg/gnupg/relocate.patch b/meta/recipes-support/gnupg/gnupg/relocate.patch
index 02f03386ec..234afd16fe 100644
--- a/meta/recipes-support/gnupg/gnupg/relocate.patch
+++ b/meta/recipes-support/gnupg/gnupg/relocate.patch
@@ -1,4 +1,4 @@ 
-From c70694bd3e71cc1fec6ccb3ea0f694c3863ebd48 Mon Sep 17 00:00:00 2001
+From f49d102adf393f57e6ca7b6ec6969f60115055ef Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@intel.com>
 Date: Wed, 19 Sep 2018 14:44:40 +0100
 Subject: [PATCH] Allow the environment to override where gnupg looks for its
@@ -13,10 +13,10 @@  Signed-off-by: Alexander Kanavin <alex@linutronix.de>
  1 file changed, 7 insertions(+), 7 deletions(-)
 
 diff --git a/common/homedir.c b/common/homedir.c
-index 835f0ea..0a67a33 100644
+index 7538642..92e8125 100644
 --- a/common/homedir.c
 +++ b/common/homedir.c
-@@ -1526,7 +1526,7 @@ gnupg_socketdir (void)
+@@ -1575,7 +1575,7 @@ gnupg_socketdir (void)
    if (!name)
      {
        unsigned int dummy;
@@ -25,7 +25,7 @@  index 835f0ea..0a67a33 100644
        gpgrt_annotate_leaked_object (name);
      }
  
-@@ -1555,7 +1555,7 @@ gnupg_sysconfdir (void)
+@@ -1604,7 +1604,7 @@ gnupg_sysconfdir (void)
    if (dir)
      return dir;
    else
@@ -34,7 +34,7 @@  index 835f0ea..0a67a33 100644
  #endif /*!HAVE_W32_SYSTEM*/
  }
  
-@@ -1591,7 +1591,7 @@ gnupg_bindir (void)
+@@ -1640,7 +1640,7 @@ gnupg_bindir (void)
        return name;
      }
    else
@@ -43,7 +43,7 @@  index 835f0ea..0a67a33 100644
  #endif /*!HAVE_W32_SYSTEM*/
  }
  
-@@ -1618,7 +1618,7 @@ gnupg_libexecdir (void)
+@@ -1667,7 +1667,7 @@ gnupg_libexecdir (void)
        return name;
      }
    else
@@ -52,7 +52,7 @@  index 835f0ea..0a67a33 100644
  #endif /*!HAVE_W32_SYSTEM*/
  }
  
-@@ -1648,7 +1648,7 @@ gnupg_libdir (void)
+@@ -1697,7 +1697,7 @@ gnupg_libdir (void)
        return name;
      }
    else
@@ -61,7 +61,7 @@  index 835f0ea..0a67a33 100644
  #endif /*!HAVE_W32_SYSTEM*/
  }
  
-@@ -1679,7 +1679,7 @@ gnupg_datadir (void)
+@@ -1728,7 +1728,7 @@ gnupg_datadir (void)
        return name;
      }
    else
@@ -70,7 +70,7 @@  index 835f0ea..0a67a33 100644
  #endif /*!HAVE_W32_SYSTEM*/
  }
  
-@@ -1711,7 +1711,7 @@ gnupg_localedir (void)
+@@ -1760,7 +1760,7 @@ gnupg_localedir (void)
        return name;
      }
    else
diff --git a/meta/recipes-support/gnupg/gnupg_2.5.21.bb b/meta/recipes-support/gnupg/gnupg_2.5.22.bb
similarity index 97%
rename from meta/recipes-support/gnupg/gnupg_2.5.21.bb
rename to meta/recipes-support/gnupg/gnupg_2.5.22.bb
index dc77691bbd..803fb2765a 100644
--- a/meta/recipes-support/gnupg/gnupg_2.5.21.bb
+++ b/meta/recipes-support/gnupg/gnupg_2.5.22.bb
@@ -25,7 +25,7 @@  SRC_URI:append:class-native = " file://0001-configure.ac-use-a-custom-value-for-
                                 file://relocate.patch"
 SRC_URI:append:class-nativesdk = " file://relocate.patch"
 
-SRC_URI[sha256sum] = "e3af2c8caa46a66a9329fa7c6880af260451914d819595beabc2c26597b31352"
+SRC_URI[sha256sum] = "96e27b020ad26510388e06f5f07f3f70a4ed8916ee995f1b72b7a024e6d9d87e"
 
 EXTRA_OECONF = "--disable-ldap \
 		--disable-ccid-driver \