Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gpg2 for openSUSE:Factory checked in at 2022-07-31 23:00:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gpg2 (Old) and /work/SRC/openSUSE:Factory/.gpg2.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gpg2" Sun Jul 31 23:00:18 2022 rev:161 rq:989805 version:2.3.7 Changes: -------- --- /work/SRC/openSUSE:Factory/gpg2/gpg2.changes 2022-05-24 20:31:06.734905771 +0200 +++ /work/SRC/openSUSE:Factory/.gpg2.new.1533/gpg2.changes 2022-07-31 23:00:28.827610941 +0200 @@ -1,0 +2,14 @@ +Tue Jul 12 22:06:02 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de> + +- GnuPG 2.3.7: + * CVE-2022-34903: garbled status messages could trick gpgme and + other parsers to accept faked status lines [boo#1201225] + * A number of bug fixes to the gpg command line interface + * gpgsm gained a number of new options and got some rework on + the PKCS#12 parser to support DFN issues keys + * The gpg agent got some added options and UI tweaks + * smart card support got a number of bug fixes, and improved + support for Technology Nexus cards and Yubikey + * The Telesec ESIGN application is now supported + +------------------------------------------------------------------- Old: ---- gnupg-2.3.6.tar.bz2 gnupg-2.3.6.tar.bz2.sig New: ---- gnupg-2.3.7.tar.bz2 gnupg-2.3.7.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gpg2.spec ++++++ --- /var/tmp/diff_new_pack.o1Fmiy/_old 2022-07-31 23:00:29.587613149 +0200 +++ /var/tmp/diff_new_pack.o1Fmiy/_new 2022-07-31 23:00:29.591613160 +0200 @@ -17,7 +17,7 @@ Name: gpg2 -Version: 2.3.6 +Version: 2.3.7 Release: 0 Summary: File encryption, decryption, signature creation and verification utility License: GPL-3.0-or-later ++++++ gnupg-2.3.6.tar.bz2 -> gnupg-2.3.7.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/gpg2/gnupg-2.3.6.tar.bz2 /work/SRC/openSUSE:Factory/.gpg2.new.1533/gnupg-2.3.7.tar.bz2 differ: char 11, line 1