~ubuntu-branches/ubuntu/precise/gnupg/precise-security : changes

~ubuntu-branches/ubuntu/precise/gnupg/precise-security » Changes from revision 44

From Revision 44 to 25

Rev	Summary	Authors	Tags	Date
44	* SECURITY UPDATE: side-channel attack on Elgamal encryption... * SECURITY UPDATE: side-channel attack on Elgamal encryption subkeys - debian/patches/CVE-2014-5270.dpatch: use sliding window method for exponentiation algorithm in mpi/mpi-pow.c. - CVE-2014-5270	Marc Deslauriers	1.4.11-3ubuntu2.7	9 years ago
43	* SECURITY UPDATE: denial of service via uncompressing garbl... * SECURITY UPDATE: denial of service via uncompressing garbled packets - debian/patches/CVE-2014-4617.dpatch: limit number of extra bytes in g10/compress.c. - CVE-2014-4617	Marc Deslauriers	1.4.11-3ubuntu2.6	9 years ago
42	* SECURITY UPDATE: RSA Key Extraction via Low-Bandwidth Acou... * SECURITY UPDATE: RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack - debian/patches/CVE-2013-4576.dpatch: Use blinding for the RSA secret operation in cipher/random.*, cipher/rsa.c, g10/gpgv.c. Normalize the MPIs used as input to secret key functions in cipher/dsa.c, cipher/elgamal.c, cipher/rsa.c. - CVE-2013-4576	Marc Deslauriers	1.4.11-3ubuntu2.5	10 years ago
41	* SECURITY UPDATE: incorrect no-usage-permitted flag handlin... * SECURITY UPDATE: incorrect no-usage-permitted flag handling - debian/patches/CVE-2013-4351.dpatch: correctly handle empty key flags in g10/getkey.c, g10/keygen.c, include/cipher.h. - CVE-2013-4351 * SECURITY UPDATE: denial of service via infinite recursion - debian/patches/CVE-2013-4402.dpatch: set limits on number of filters and nested packets in util/iobuf.c, g10/mainproc.c. - CVE-2013-4402	Marc Deslauriers	1.4.11-3ubuntu2.4	10 years ago
40	* SECURITY UPDATE: The path of execution in an exponentiatio... * SECURITY UPDATE: The path of execution in an exponentiation function may depend upon secret key data, allowing a local attacker to determine the contents of the secret key through a side-channel attack. - debian/patches/CVE-2013-4242.dpatch: always perform the mpi_mul for exponents in secure memory. Based on upstream patch. - CVE-2013-4242	Seth Arnold	1.4.11-3ubuntu2.3	10 years ago
39	* SECURITY UPDATE: keyring corruption via malformed key impo... * SECURITY UPDATE: keyring corruption via malformed key import - debian/patches/CVE-2012-6085.dpatch: validate PKTTYPE in g10/import.c. - CVE-2012-6085	Marc Deslauriers	1.4.11-3ubuntu2.2	11 years ago
38	debian/patches/long-keyids.dpatch: Use the longest key ID av... debian/patches/long-keyids.dpatch: Use the longest key ID available when requesting a key from a key server.	Marc Deslauriers	1.4.11-3ubuntu2.1	11 years ago
37	releasing version 1.4.11-3ubuntu2 releasing version 1.4.11-3ubuntu2	Colin Watson	1.4.11-3ubuntu2	12 years ago
36	Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign. Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign.	Colin Watson		12 years ago
35	* Resynchronise with Debian (LP: #720905). Remaining change... * Resynchronise with Debian (LP: #720905). Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Fix udeb build failure on powerpc, building with -O2 instead of -Os. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. * debian/{control,rules}: Remove the Win32 build (and mingw32 build-dependency), since mingw32 is in universe, and will remain so for the forseeable future.	Rico Tzschichholz	1.4.11-3ubuntu1	13 years ago
34	No-change rebuild to drop upstream changelog. No-change rebuild to drop upstream changelog.	Martin Pitt	1.4.10-4ubuntu2	13 years ago
33	releasing version 1.4.10-4ubuntu1 releasing version 1.4.10-4ubuntu1	Colin Watson	1.4.10-4ubuntu1	13 years ago
32	merge from Debian 1.4.10-4 merge from Debian 1.4.10-4	Colin Watson		13 years ago
31	releasing version 1.4.10-2ubuntu2 releasing version 1.4.10-2ubuntu2	Colin Watson	1.4.10-2ubuntu2	13 years ago
30	Only suggest gnupg-curl and libldap; recommendations are pul... Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system.	Colin Watson		13 years ago
29	* Merge from Debian testing (lp: #503064, #477818). Remainin... * Merge from Debian testing (lp: #503064, #477818). Remaining changes: - Add 'debian/patches/50_disable_mlock_test.dpatch': Disable mlock() test since it fails with ulimit 0 (on buildds). - Add 'debian/patches/61_use_agent_default.dpatch': Patch to set gpg (or gpg2) and gpgsm to use a passphrase agent by default (lp: 15485) - Fix udeb build failure on powerpc, building with -O2 instead of -Os.	Michael Bienia	1.4.10-2ubuntu1	14 years ago
28	Fix udeb build failure on powerpc, building with -O2 instead... Fix udeb build failure on powerpc, building with -O2 instead of -Os.	Matthias Klose	1.4.9-4ubuntu7	14 years ago
27	Build-depend on libreadline-dev instead of libreadline5-dev. Build-depend on libreadline-dev instead of libreadline5-dev.	Matthias Klose	1.4.9-4ubuntu6	14 years ago
26	* debian/gnupg.udev: * debian/gnupg.udev: Add udev rules to set ACLs on SCM smartcard readers. They replace the hal rules for the same purpose. (LP: #57755) * debian/rules: Call dh_installudev.	Michael Bienia	1.4.9-4ubuntu5	14 years ago
25	Undo the last change. A GnuPG bug with handling multiple key... Undo the last change. A GnuPG bug with handling multiple keyservers makes this break	Mackenzie Morgan	1.4.9-4ubuntu4	14 years ago

Older »