~ubuntu-branches/ubuntu/lucid/gnupg/lucid : changes

~ubuntu-branches/ubuntu/lucid/gnupg/lucid » Changes from revision 29

From Revision 17

Rev	Summary	Authors	Tags	Date
17	Add 'debian/patches/50_show_primary_only.dpatch': add Add 'debian/patches/50_show_primary_only.dpatch': add 'show-primary-uid-only' to verify options, to suppress 'aka' output in key verifications, backported from 1.4.7 upstream.	Kees Cook	1.4.6-2ubuntu2	17 years ago
16	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). - debian/rules: + Do not install gpg as suid root, since that is not necessary with kernels 2.6.8+. + Make the build fail if the test suite fails. - debian/control: Maintainer field update.	Kees Cook	1.4.6-2ubuntu1	17 years ago
15	* SECURITY UPDATE: without --status-fd, forged inline sigs c... * SECURITY UPDATE: without --status-fd, forged inline sigs can appear valid. * debian/patches/50_stop_multiple_messages.dpatch: upstream patch. * References ftp://ftp.gnupg.org/gcrypt/gnupg/patches/gnupg-1.4.6-multiple-message.patch CVE-2007-1263	Kees Cook	1.4.6-1ubuntu2	17 years ago
14	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). - debian/rules: + Do not install gpg as suid root, since that is not necessary with kernels 2.6.8+. + Make the build fail if the test suite fails.	Kees Cook	1.4.6-1ubuntu1	17 years ago
13	* SECURITY UPDATE: unwound stack data use, leading to arbitr... * SECURITY UPDATE: unwound stack data use, leading to arbitrary code execution. * Add debian/patches/29_dxf_context_stack.dpatch: upstream patch, use heap for allocation instead. * References CVE-2006-6235	Kees Cook	1.4.5-3ubuntu2	17 years ago
12	* Merge to Debian unstable. Remaining Ubuntu changes: * Merge to Debian unstable. Remaining Ubuntu changes: - config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). - debian/rules: + Do not install gpg as suid root, since that is not necessary with kernels 2.6.8+. + Make the build fail if the test suite fails.	Martin Pitt	1.4.5-3ubuntu1	17 years ago
11	* Merge to Debian unstable. Remaining Ubuntu changes: * Merge to Debian unstable. Remaining Ubuntu changes: - config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). - debian/rules: + Do not install gpg as suid root, since that is not necessary with kernels 2.6.8+. + Make the build fail if the test suite fails.	Martin Pitt	1.4.5-2ubuntu1	17 years ago
10	* SECURITY UPDATE: Local arbitrary code execution. * SECURITY UPDATE: Local arbitrary code execution. * Add debian/patches/27_comment_control_overflow.dpatch: - Fix buffer overflows in parse_comment() and parse_gpg_control(). - Patch extracted from stable 1.4.5 release. - Reproducer: perl -e 'print "\xfd\xff\xff\xff\xff\xfe"'\| gpg --no-armor - Credit: Evgeny Legerov - CVE-2006-3746	Martin Pitt	1.4.3-2ubuntu3	17 years ago
9	Rebuild with current zlib1g-dev to fix udeb shlibdeps. Thank... Rebuild with current zlib1g-dev to fix udeb shlibdeps. Thanks to Evan Dandrea for noticing.	Colin Watson	1.4.3-2ubuntu2	17 years ago
8	* Sync with Debian: * Sync with Debian: Remaining Ubuntu changes: + config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). + debian/patches/20_no_tty_fix.dpatch: - dropped, upstream now + debian/rules: - don't use the included gettext - Don't install gpg as suid root, since that is not necessary with kernels 2.6.8+ - Make the build fail if the test suite fails	Sebastian Dröge	1.4.3-2ubuntu1	17 years ago
7	* debian/rules: * debian/rules: - Remove --with-included-gettext configure option; use libc's gettext to get language pack support. Closes: LP#25609 - rm'ing locale.alias is not necessary with this change, so change it to rm -f to not break the build.	Martin Pitt	1.4.2.2-1ubuntu2	18 years ago
6	* Resynchronize with Debian, UVF exception approved by Matt.... * Resynchronize with Debian, UVF exception approved by Matt. 1.4.2.2 only contains a security fix, updated test cases, and updated translations. * For reference and to ease future merges, these are the remaining Ubuntu changes: - debian/rules: Make the build fail if the test suite fails. - debian/changelog: Add missing CVE number. - Don't install gpg as suid root, since that is not necessary with kernels 2.6.8+. - config.h.in: Disable mlock() test since it fails with ulimit 0 (on buildds). - debian/patches/20_no_tty_fix.dpatch: Malone #5570	Martin Pitt	1.4.2.2-1ubuntu1	18 years ago
5	* New upstream security bugfix release, only contains the fo... * New upstream security bugfix release, only contains the following changes: - Security fix for a verification weakness in gpgv. Some input could lead to gpgv exiting with 0 even if the detached signature file did not carry any signature. This is not as fatal as it might seem because the suggestion as always been not to rely on th exit code but to parse the --status-fd messages. However it is likely that gpgv is used in that simplified way and thus we do this release. Same problem with "gpg --verify" but nobody should have used this for signature verification without checking the status codes anyway. [CVE-2006-0455] - Added a test case for above vulnerability. * debian/rules: Call the test suite during build. (Will fail the build if the test suite fails.)	Martin Pitt	1.4.2.1-0ubuntu1	18 years ago
4	* Add 20_no_tty_fix.dpatch: * Add 20_no_tty_fix.dpatch: - Do not open /dev/tty if --no-tty is specified, since this breaks programs like seahorse. - Patch also accepted upstream. - Thanks to Ryan Lortie <desrt@desrt.ca> for the patch. - Malone #5570	Martin Pitt	1.4.2-2ubuntu2	18 years ago
3	* Resynchronise with Debian, fixing changelog ordering. * Resynchronise with Debian, fixing changelog ordering. * Added CAN number to previous changelog entry.	Martin Pitt	1.4.1-1ubuntu1	18 years ago
2	debian/rules: Call pkgstriptranslations if present (the pack... debian/rules: Call pkgstriptranslations if present (the package does not use debhelper, thus it does not happen automatically).	Martin Pitt	1.2.5-3ubuntu5	19 years ago
1	Import upstream version 1.2.5 Import upstream version 1.2.5	Martin Pitt	upstream-1.2.5	19 years ago