~ubuntu-branches/ubuntu/saucy/gnupg/saucy-security : changes

~ubuntu-branches/ubuntu/saucy/gnupg/saucy-security » Changes from revision 45

From Revision 45 to 26

Rev	Summary	Authors	Tags	Date
45	* SECURITY UPDATE: denial of service via uncompressing garbl... * SECURITY UPDATE: denial of service via uncompressing garbled packets - debian/patches/CVE-2014-4617.patch: limit number of extra bytes in g10/compress.c. - CVE-2014-4617	Marc Deslauriers	1.4.14-1ubuntu2.2	9 years ago
44	* SECURITY UPDATE: RSA Key Extraction via Low-Bandwidth Acou... * SECURITY UPDATE: RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack - debian/patches/CVE-2013-4576.patch: Use blinding for the RSA secret operation in cipher/random.*, cipher/rsa.c, g10/gpgv.c. Normalize the MPIs used as input to secret key functions in cipher/dsa.c, cipher/elgamal.c, cipher/rsa.c. - CVE-2013-4576	Marc Deslauriers	1.4.14-1ubuntu2.1	10 years ago
43	* SECURITY UPDATE: incorrect no-usage-permitted flag handlin... * SECURITY UPDATE: incorrect no-usage-permitted flag handling - debian/patches/CVE-2013-4351.patch: correctly handle empty key flags in g10/getkey.c, g10/keygen.c, include/cipher.h. - CVE-2013-4351 * SECURITY UPDATE: denial of service via infinite recursion - debian/patches/CVE-2013-4402.patch: set limits on number of filters and nested packets in util/iobuf.c, g10/mainproc.c. - CVE-2013-4402	Marc Deslauriers	1.4.14-1ubuntu2	10 years ago
42	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build.	Colin Watson	1.4.14-1ubuntu1	10 years ago
41	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Update config.guess/config.sub for aarch64.	Colin Watson	1.4.12-7ubuntu1	11 years ago
40	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Update config.guess/config.sub for aarch64. * Dropped patches: - Fix udeb build failure on powerpc, building with -O2 instead of -Os. (No longer seems to be necessary.) * Simplify removal of Win32 build, to make this easier to merge in future.	Colin Watson	1.4.12-6ubuntu1	11 years ago
39	Update config.guess,sub for aarch64 Update config.guess,sub for aarch64	Wookey	1.4.11-3ubuntu4	11 years ago
38	debian/patches/long-keyids.dpatch: Use the longest key ID av... debian/patches/long-keyids.dpatch: Use the longest key ID available when requesting a key from a key server.	Marc Deslauriers	1.4.11-3ubuntu3	11 years ago
37	releasing version 1.4.11-3ubuntu2 releasing version 1.4.11-3ubuntu2	Colin Watson	1.4.11-3ubuntu2	12 years ago
36	Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign. Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign.	Colin Watson		12 years ago
35	* Resynchronise with Debian (LP: #720905). Remaining change... * Resynchronise with Debian (LP: #720905). Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Fix udeb build failure on powerpc, building with -O2 instead of -Os. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. * debian/{control,rules}: Remove the Win32 build (and mingw32 build-dependency), since mingw32 is in universe, and will remain so for the forseeable future.	Rico Tzschichholz	1.4.11-3ubuntu1	13 years ago
34	No-change rebuild to drop upstream changelog. No-change rebuild to drop upstream changelog.	Martin Pitt	1.4.10-4ubuntu2	13 years ago
33	releasing version 1.4.10-4ubuntu1 releasing version 1.4.10-4ubuntu1	Colin Watson	1.4.10-4ubuntu1	13 years ago
32	merge from Debian 1.4.10-4 merge from Debian 1.4.10-4	Colin Watson		13 years ago
31	releasing version 1.4.10-2ubuntu2 releasing version 1.4.10-2ubuntu2	Colin Watson	1.4.10-2ubuntu2	13 years ago
30	Only suggest gnupg-curl and libldap; recommendations are pul... Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system.	Colin Watson		13 years ago
29	* Merge from Debian testing (lp: #503064, #477818). Remainin... * Merge from Debian testing (lp: #503064, #477818). Remaining changes: - Add 'debian/patches/50_disable_mlock_test.dpatch': Disable mlock() test since it fails with ulimit 0 (on buildds). - Add 'debian/patches/61_use_agent_default.dpatch': Patch to set gpg (or gpg2) and gpgsm to use a passphrase agent by default (lp: 15485) - Fix udeb build failure on powerpc, building with -O2 instead of -Os.	Michael Bienia	1.4.10-2ubuntu1	14 years ago
28	Fix udeb build failure on powerpc, building with -O2 instead... Fix udeb build failure on powerpc, building with -O2 instead of -Os.	Matthias Klose	1.4.9-4ubuntu7	14 years ago
27	Build-depend on libreadline-dev instead of libreadline5-dev. Build-depend on libreadline-dev instead of libreadline5-dev.	Matthias Klose	1.4.9-4ubuntu6	14 years ago
26	* debian/gnupg.udev: * debian/gnupg.udev: Add udev rules to set ACLs on SCM smartcard readers. They replace the hal rules for the same purpose. (LP: #57755) * debian/rules: Call dh_installudev.	Michael Bienia	1.4.9-4ubuntu5	14 years ago

Older »