CVS commit: pkgsrc/security/gnupg2

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Dec 30 22:39:00 UTC 2025

Modified Files:
        pkgsrc/security/gnupg2: Makefile distinfo

Log Message:
gnupg2: update to 2.4.9.

Noteworthy changes in version 2.4.9 (2025-12-30)
------------------------------------------------

  * gpg: Fix possible memory corruption in the armor parser.  [T7906]

  * gpg: Avoid potential downgrade to SHA1 in 3rd party key
    signatures.  [rGddb012be7f]

  * gpg: Error out on unverified output for non-detached signatures.
    [rG9d302f978b]

  * gpg: Do not allow compressed key packets on import.  [T7014]

  * scd: Fix a harmless read buffer over-read in a function used by
    PKCS#15 cards.  [T7662]

  * dirmngr: Do not require a keyserver for "gpg --fetch-key".
    [T7693]

  * agent: Fix ssh-agent's request_identities for skipped Brainpool
    keys.  [rG6bf5696c85]


To generate a diff of this commit:
cvs rdiff -u -r1.165 -r1.166 pkgsrc/security/gnupg2/Makefile
cvs rdiff -u -r1.90 -r1.91 pkgsrc/security/gnupg2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnupg2/Makefile
diff -u pkgsrc/security/gnupg2/Makefile:1.165 pkgsrc/security/gnupg2/Makefile:1.166
--- pkgsrc/security/gnupg2/Makefile:1.165       Tue Jul  8 13:21:06 2025
+++ pkgsrc/security/gnupg2/Makefile     Tue Dec 30 22:38:59 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.165 2025/07/08 13:21:06 jperkin Exp $
+# $NetBSD: Makefile,v 1.166 2025/12/30 22:38:59 wiz Exp $
 
-DISTNAME=      gnupg-2.4.8
+DISTNAME=      gnupg-2.4.9
 PKGNAME=       ${DISTNAME:S/gnupg-/gnupg2-/}
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GNUPG:=gnupg/}

Index: pkgsrc/security/gnupg2/distinfo
diff -u pkgsrc/security/gnupg2/distinfo:1.90 pkgsrc/security/gnupg2/distinfo:1.91
--- pkgsrc/security/gnupg2/distinfo:1.90        Wed May 21 15:01:29 2025
+++ pkgsrc/security/gnupg2/distinfo     Tue Dec 30 22:38:59 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.90 2025/05/21 15:01:29 adam Exp $
+$NetBSD: distinfo,v 1.91 2025/12/30 22:38:59 wiz Exp $
 
-BLAKE2s (gnupg-2.4.8.tar.bz2) = 518e17e46ae575344000fee2c94a20d3db1407606191d152f1f097b6ff770518
-SHA512 (gnupg-2.4.8.tar.bz2) = d7f07a258141a583bc8be18c0984d7dfe8508f12c624c053881ee63dfee11adcda8de216bcaaef9f5d24a1e217de70bf69ee2e3cc43b0da66a0e571ce9c4b436
-Size (gnupg-2.4.8.tar.bz2) = 8017685 bytes
+BLAKE2s (gnupg-2.4.9.tar.bz2) = 0e0f8344e9a132504b8afccb0209c01ded75b54b60825f9d3977d81f47ae5aeb
+SHA512 (gnupg-2.4.9.tar.bz2) = 4638016b390a0024fa0cbe14181c43a81991e4275043855397ef099b927985d175d32452fc15b06485623b9292662dd6da464b2e5def8b77b2e4e48a072ab521
+Size (gnupg-2.4.9.tar.bz2) = 8086407 bytes
 SHA1 (patch-common_sysutils.c) = 569c12e21172c1521284922244b2f4f361c945d6
 SHA1 (patch-doc_Makefile.in) = 528a57e7fd34d1e03d7a47b432c60a0ec5a23b94