[Dragora-bug] Dragora 2.2 updates #008

[Matias A. Fonzo]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The following updates (#008) are only bugfix releases:

  gnupg1
  gnupg2

We recommend that you upgrade your packages as soon as possible.

Details
- -------

  This releases fixes a regression introduced with GnuPG 1.4.17
and GnuPG 2.0.24 releases.

 * Fix a regression if more than one keyid is given to
   --recv-keys et al.

 * Cap RSA and Elgamal keysize at 4096 bit also for unattended key
   generation.

 * gpgsm: Fix a DISPLAY related problem with --export-secret-key-p12.

 * scdaemon: Support reader Gemalto IDBridge CT30.

References:

  * http://lists.gnu.org/archive/html/info-gnu/2014-06/msg00017.html
  * http://lists.gnu.org/archive/html/info-gnu/2014-06/msg00016.html

Obtain the packages from

* 32 bit *

http://gungre.ch/dragora/mirror/dragora-2.2/upgrades/packages/32b/gnupg1-1.4.18-i486-1.tlz
http://gungre.ch/dragora/mirror/dragora-2.2/upgrades/packages/32b/gnupg2-2.0.25-i486-1.tlz

* 64 bit *

http://gungre.ch/dragora/mirror/dragora-2.2/upgrades/packages/64b/gnupg1-1.4.18-x86_64-1.tlz
http://gungre.ch/dragora/mirror/dragora-2.2/upgrades/packages/64b/gnupg2-2.0.25-x86_64-1.tlz

Checksums (SHA1)
- ----------------

51b2f529fc880eb1d30340ce6a0fb6b1d40b3e95  gnupg1-1.4.18-i486-1.tlz
d307fd7a220a29a9d413c43b9bb256358107417f  gnupg2-2.0.25-i486-1.tlz

36531cbb40f34bfa1292ce07ae82bff016be698c  gnupg1-1.4.18-x86_64-1.tlz
e1662c15ab31eafb320b8ed96010557ff85c461f  gnupg2-2.0.25-x86_64-1.tlz

If you need the detached GPG signatures[1] just append .sig to the URLs
above.

Upgrading
- ---------

To upgrade a package you issue the following command:
  pkg upgrade <package.tlz>

To upgrade multiple packages, simply type:
  pkg upgrade gnupg1-1.4.18-i486-1.tlz gnupg2-2.0.25-i486-1.tlz ...

Notes
=====

  You can get all the upgrades via RSYNC, for example, to obtain 32-bit
packages, type:

  # rsync -avPiz gungre.ch::dragora/dragora-2.2/upgrades/packages/32b .

Then use the sha1sum(1) tool for a complete checksumming:

  # sha1sums -c SHA1SUMS

  `pkg upgrade' can be used to upgrade all the packages (installed or not
installed); for more information, take a look at:

  http://dragora.org/wiki/doku.php/guides/d2/pkgmanager

Footnotes:

[1] Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact. First, be sure to download both the .sig file
and the corresponding tarball. Then, run a command like this:

  gpg --verify gnupg2-2.0.25-i486-1.tlz.sig

If that command fails because you don't have the required public key,
then run these commands to import it:

  wget http://gungre.ch/dragora/mirror/dragora-2.2/KEY
  gpg --import KEY

and re-run the `gpg --verify' sequence.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJTteCUAAoJEKpCZu9BMdKo6BMH/j/xa0wDCcoJnTX5TGSHDgeX
lnY/P7CzmIMtr26DiELmsx3Uo9j2rVChGeMxKhcemW+bDvsdCXZk5QZVYhFSvTLt
8h3cOBEMKOGxQSNruQ+M8jRXh7EbIn1U29p+DiEwol/FhpEHHBuWanmGbnJX9rfe
+fkiN2ERP9jZXIS05elVihd4l4bpgxR5eQhC1uUDKTSAE1xNOaIgcHZQuzAEwIgB
rhZDuZ4RPi9lTIygikYlQQRErXoTV4r6dTKFg13oGYYaWits7ayy2wqpne7ADhxo
nJk8q9PktiBAYCXqh6t8ISi6II0i+aACnCe59CZJvdTW4v4MUr/k2xuVLq7zwS0=
=EiW8
-----END PGP SIGNATURE-----