Page MenuHomeSolus

Update gnupg to 2.2.6 to fix CVE-2018-9234
ClosedPublic

Authored by kyrios123 on Apr 10 2018, 1:26 PM.

Details

Summary
  • gpg,gpgsm: New option --request-origin to pretend requests coming from a browser or a remote site.
  • gpg: Fix race condition on trustdb.gpg updates due to too early released lock.
  • gpg: Emit FAILURE status lines in almost all cases.
  • gpg: Implement --dry-run for --passwd to make checking a key's passphrase straightforward.
  • gpg: Make sure to only accept a certification capable key for key signatures.
  • gpg: Better user interaction in --card-edit for the factory-reset sub-command.
  • gpg: Improve changing key attributes in --card-edit by adding an explicit "key-attr" sub-command.
  • gpg: Print the keygrips in the --card-status.
  • scd: Support KDF DO setup.
  • scd: Fix suspend/resume handling in the CCID driver.
  • agent: Evict cached passphrases also via a timer.
  • agent: Use separate passphrase caches depending on the request origin.
  • ssh: Support signature flags.
  • dirmngr: Handle failures related to missing IPv6 support gracefully.
  • Allow the use of UNC directory names as homedir.

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan
  • This commit is signed with this version of GnuPG
  • All unit tests are OK

Diff Detail

Repository
R1025 gnupg
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kyrios123 retitled this revision from Update gnupg to 2.2.6 to Update gnupg to 2.2.6 to fix CVE-2018-9234.Apr 19 2018, 2:00 PM
kyrios123 added a project: Restricted Project.
This revision is now accepted and ready to land.Apr 19 2018, 2:19 PM
This revision was automatically updated to reflect the committed changes.