~ubuntu-branches/ubuntu/trusty/gnupg/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/gnupg/trusty-security » Changes from revision 49

From Revision 49 to 30

Rev	Summary	Authors	Tags	Date
49	* SECURITY UPDATE: denial of service via uncompressing garbl... * SECURITY UPDATE: denial of service via uncompressing garbled packets - debian/patches/CVE-2014-4617.patch: limit number of extra bytes in g10/compress.c. - CVE-2014-4617	Marc Deslauriers	1.4.16-1ubuntu2.1	9 years ago
48	Add patch init_trustdb.patch (Closes: #737128) Add patch init_trustdb.patch (Closes: #737128)	Brian Murray	1.4.16-1ubuntu2	10 years ago
47	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Build using dh-autoreconf - Disable inline assembler for ppc64el.	Marc Deslauriers	1.4.16-1ubuntu1	10 years ago
46	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Build using dh-autoreconf - Disable inline assembler for ppc64el. * Moved CVE-2013-4576 patch to the right directory, and added to series file so it actually gets applied.	Marc Deslauriers	1.4.15-2ubuntu1	10 years ago
45	* Build using dh-autoreconf * Build using dh-autoreconf * Disable inline assembler for ppc64el.	Matthias Klose	1.4.15-1.1ubuntu2	10 years ago
44	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. * Dropped upstreamed patches: - debian/patches/CVE-2013-4351.patch - debian/patches/CVE-2013-4402.patch	Marc Deslauriers	1.4.15-1.1ubuntu1	10 years ago
43	* SECURITY UPDATE: incorrect no-usage-permitted flag handlin... * SECURITY UPDATE: incorrect no-usage-permitted flag handling - debian/patches/CVE-2013-4351.patch: correctly handle empty key flags in g10/getkey.c, g10/keygen.c, include/cipher.h. - CVE-2013-4351 * SECURITY UPDATE: denial of service via infinite recursion - debian/patches/CVE-2013-4402.patch: set limits on number of filters and nested packets in util/iobuf.c, g10/mainproc.c. - CVE-2013-4402	Marc Deslauriers	1.4.14-1ubuntu2	10 years ago
42	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build.	Colin Watson	1.4.14-1ubuntu1	10 years ago
41	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Update config.guess/config.sub for aarch64.	Colin Watson	1.4.12-7ubuntu1	11 years ago
40	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. - Remove the Win32 build. - Update config.guess/config.sub for aarch64. * Dropped patches: - Fix udeb build failure on powerpc, building with -O2 instead of -Os. (No longer seems to be necessary.) * Simplify removal of Win32 build, to make this easier to merge in future.	Colin Watson	1.4.12-6ubuntu1	11 years ago
39	Update config.guess,sub for aarch64 Update config.guess,sub for aarch64	Wookey	1.4.11-3ubuntu4	11 years ago
38	debian/patches/long-keyids.dpatch: Use the longest key ID av... debian/patches/long-keyids.dpatch: Use the longest key ID available when requesting a key from a key server.	Marc Deslauriers	1.4.11-3ubuntu3	11 years ago
37	releasing version 1.4.11-3ubuntu2 releasing version 1.4.11-3ubuntu2	Colin Watson	1.4.11-3ubuntu2	12 years ago
36	Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign. Mark gnupg, gnupg-curl, and gpgv Multi-Arch: foreign.	Colin Watson		12 years ago
35	* Resynchronise with Debian (LP: #720905). Remaining change... * Resynchronise with Debian (LP: #720905). Remaining changes: - Disable mlock() test since it fails with ulimit 0 (on buildds). - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default. - Fix udeb build failure on powerpc, building with -O2 instead of -Os. - Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system. * debian/{control,rules}: Remove the Win32 build (and mingw32 build-dependency), since mingw32 is in universe, and will remain so for the forseeable future.	Rico Tzschichholz	1.4.11-3ubuntu1	13 years ago
34	No-change rebuild to drop upstream changelog. No-change rebuild to drop upstream changelog.	Martin Pitt	1.4.10-4ubuntu2	13 years ago
33	releasing version 1.4.10-4ubuntu1 releasing version 1.4.10-4ubuntu1	Colin Watson	1.4.10-4ubuntu1	13 years ago
32	merge from Debian 1.4.10-4 merge from Debian 1.4.10-4	Colin Watson		13 years ago
31	releasing version 1.4.10-2ubuntu2 releasing version 1.4.10-2ubuntu2	Colin Watson	1.4.10-2ubuntu2	13 years ago
30	Only suggest gnupg-curl and libldap; recommendations are pul... Only suggest gnupg-curl and libldap; recommendations are pulled into minimal, and we don't need the keyserver utilities in a minimal Ubuntu system.	Colin Watson		13 years ago

Older »