Your message dated Mon, 21 Nov 2016 19:18:36 +0000
with message-id <[email protected]>
and subject line Bug#845078: fixed in gnupg2 2.1.16-2
has caused the Debian Bug report #845078,
regarding Links against libadns1 with limited security support
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
845078: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845078
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dirmngr
Version: 2.1.15-9
Severity: wishlist
Hi Daniel,
libadns1 has limited security support in Debian so I wonder if this is a
good choice for dirmngr. Please consider using another resolver by
default.
$ grep adns /usr/share/debian-security-support/security-support-limited
adns Stub resolver that should only be used with trusted recursors
Thanks a lot for maintaining gnupg in Debian.
Cheers,
-- Guido
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'),
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages dirmngr depends on:
ii adduser 3.115
ii libadns1 1.5.0~rc1-1
ii libassuan0 2.4.3-1
ii libc6 2.24-5
ii libgcrypt20 1.7.3-2
ii libgnutls30 3.5.6-6
ii libgpg-error0 1.24-1
ii libksba8 1.3.5-2
ii libldap-2.4-2 2.4.42+dfsg-2+b3
ii libnpth0 1.2-3
ii lsb-base 9.20161016
Versions of packages dirmngr recommends:
ii gnupg 2.1.15-9
Versions of packages dirmngr suggests:
ii tor 0.2.8.9-1
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: gnupg2
Source-Version: 2.1.16-2
We believe that the bug you reported is fixed in the latest version of
gnupg2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Daniel Kahn Gillmor <[email protected]> (supplier of updated gnupg2
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 21 Nov 2016 09:57:26 -0500
Source: gnupg2
Binary: gnupg-agent scdaemon gpgsm gnupg gnupg2 gpgv gpgv2 dirmngr gpgv-udeb
gpgv-static gpgv-win32 gnupg-l10n
Architecture: source
Version: 2.1.16-2
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuPG Maintainers <[email protected]>
Changed-By: Daniel Kahn Gillmor <[email protected]>
Description:
dirmngr - GNU privacy guard - network certificate management service
gnupg - GNU privacy guard - a free PGP replacement
gnupg-agent - GNU privacy guard - cryptographic agent
gnupg-l10n - GNU privacy guard - localization files
gnupg2 - GNU privacy guard - a free PGP replacement (dummy transitional pa
gpgsm - GNU privacy guard - S/MIME version
gpgv - GNU privacy guard - signature verification tool
gpgv-static - minimal signature verification tool (static build)
gpgv-udeb - minimal signature verification tool (udeb)
gpgv-win32 - GNU privacy guard - signature verification tool (win32 build)
gpgv2 - GNU privacy guard - signature verification tool (dummy transition
scdaemon - GNU privacy guard - smart card support
Closes: 845078
Changes:
gnupg2 (2.1.16-2) unstable; urgency=medium
.
* avoid using adns, due to lack of security support (Closes: #845078)
Checksums-Sha1:
ec0d83170f38bb841fff92f3c395ce5c7ffaaaae 3275 gnupg2_2.1.16-2.dsc
cfca3a8f0cb6438763a63c522d5627a95705dbd7 50675 gnupg2_2.1.16-2.debian.tar.bz2
Checksums-Sha256:
f7cb62f01b62dde3f5b5c53fcda224af28a3fa40771ea827e30d5bad427c2764 3275
gnupg2_2.1.16-2.dsc
0599587f53d46033be7830418c1ce4ece180f209965fc82452ef6d70ae4914d4 50675
gnupg2_2.1.16-2.debian.tar.bz2
Files:
1e2deb35298d00197ac56251b74eb041 3275 utils optional gnupg2_2.1.16-2.dsc
15b42c06efd0a66c0b29d775fca8f101 50675 utils optional
gnupg2_2.1.16-2.debian.tar.bz2
-----BEGIN PGP SIGNATURE-----
iQKqBAEBCgCUFiEE7bLnT1b88rZyl7c1JOz/Wv9oNwoFAlgzR2FfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEVE
QjJFNzRGNTZGQ0YyQjY3Mjk3QjczNTI0RUNGRjVBRkY2ODM3MEEWHGRrZ0BmaWZ0
aGhvcnNlbWFuLm5ldAAKCRAk7P9a/2g3CthpD/0UbavXI7vSTCWkEyQOKadhIbZT
OwV7u5blYEcAlhWl/Zh8T4Qh875qvvm4RqEVB0kxHdppejxIKAfkceZ9xx27hJtF
xelpA341gMvgKlor3RCG11DKqGOOg36qSPDGsIk2lPaJljPYDRaRC8hBFXQp4fny
xTbe1hTUKqajleUkMJOz0kz7HBkujRaST8qyc6k1sMZr/v6auQ2ezDufCR4bnUOg
5VAQlzEowECjGUzXEOGKyO4XhC82laClU2vx0TQYUC8vNi5GOHCR9GsX4iBrhQ3/
pnb7AOJied5FkZkfHpwCfKXsAdBc2HZeKLGLrmwCkNEUqQXc5b11RqcKt4Q4pg4Y
LVQ1x7B6IF1Srs3fSReaepQnOvlB3n33h/Z1ffygb/+3NAu/7GIcE4W6sWGvY/xO
k3Xt/wq1uYASNOidMAZlCR3DNqweU2aa31Ikwc6zVYk7q6nF//Bbl3T/52cfcrZ+
rAs7ngXvCrKm1aVNQHubFR0rBGrRc1XJ7stV1NHuF/rB5eZmDc90te4XmMOxoa9+
/vXuLXBuztO8g8o8f9kfB2ux9Swbk5QGVR0/iIdF0pyhBQEyWpl/LXb4WVV/FwI4
Eso87+VWtVqZQ4HIYW5uD7otP5FgJlO3XK7qd/UKOLB4MHEm2esKw7x59bGjuiUv
I/8xSjYwlF4GA5w/HQ==
=N/RS
-----END PGP SIGNATURE-----
--- End Message ---