./security/gnupg, GNU Privacy Guard, public-Key encryption and digital signatures

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.4.23, Package name: gnupg-1.4.23, Maintainer: pkgsrc-users

GNU Privacy Guard

GnuPG is a complete and free replacement for PGP. GnuPG is nearly in
compliance with RFC2440 (OpenPGP).


Required to run:
[devel/readline]

Required to build:
[pkgtools/cwrappers]

Master sites:

SHA1: 13747486ed5ff707f796f34f50f4c3085c3a6875
RMD160: 087c494ff78bd1e85873ac383e0c6e236b6a9869
Filesize: 3661.478 KB

Version history: (Expand)


CVS history: (Expand)


   2018-06-15 23:51:23 by Tim Zingelman | Files touched by this commit (2) | Package updated
Log message:
gnupg: update to 1.4.23

Fixes CVE-2017-7526

Updates since 1.4.22:

2018-06-11  Werner Koch  <wk@gnupg.org>

        Release 1.4.23.
        + commit 8ae6a246bef5b5eb0684e9fb1c933a4f8441dadd

2018-06-08  Werner Koch  <wk@gnupg.org>

        gpg: Sanitize diagnostic with the original file name.
        + commit 2326851c60793653069494379b16d84e4c10a0ac
        * g10/mainproc.c (proc_plaintext): Sanitize verbose output.

2018-04-13  NIIBE Yutaka  <gniibe@fsij.org>

        g10: Push compress filter only if compressed.
        + commit 0f8fd95ab32a6d29dac79e19f0850037c7d0c16f
        * g10/compress.c (handle_compressed): Fix memory leak.

2017-12-18  NIIBE Yutaka  <gniibe@fsij.org>

        po: Update Japanese translation.
        + commit 1338bce5f66a95b53f18c4b54f0e9ac79604500a
        * po/ja.po: Fix message with no "%s".

2017-12-04  NIIBE Yutaka  <gniibe@fsij.org>
            Damien Goutte-Gattat  <dgouttegattat@incenp.org>

        g10: Fix regexp sanitization.
        + commit 9441946e1824eb58249c58432ed1f554d0d8a102
        * g10/trustdb.c (sanitize_regexp): Only escape operators.

2017-11-10  Dario Niedermann  <dario@darioniedermann.it>

        Do not use C99 feature.
        + commit 877e3073d731fec55a88673f91ed646a75e786c8
        * cipher/rsa.c (secret): Move var decl to the beginning.

2017-09-06  Frans Spiesschaert  <Frans.Spiesschaert@yucom.be>

        po: update Dutch translation.
        + commit aa26eda8ab679a80a7be2c82478cb4440b45ec8c

2017-08-04  Marcus Brinkmann  <marcus.brinkmann@ruhr-uni-bochum.de>

        doc: Remove documentation for future option --faked-system-time.
        + commit eb15d5ed8e4a765998e9de7698bdc65328bcaaa3
        doc/gpg.texi: Remove documentation for --faked-system-time.

2017-08-02  Daniel Kahn Gillmor  <dkg@fifthhorseman.net>

        debian: Remove packaging from upstream repository.
        + commit 9832a4bacfa5232534f2c7fe7655bd0677a41f6e
        Debian packaging for GnuPG is handled in debian git repositories, and
        doesn't belong here in the upstream repository.  The packaging was
        significantly out of date anyway.

        If you're looking for debian packaging for the 1.4 branch of GnuPG,
        please use the following git remote:

            https://anonscm.debian.org/git/pkg-gnupg/gnupg1.git

2017-08-02  Joe Hansen  <joedalton2@yahoo.dk>

        po: Update Danish translation.
        + commit 12afc37a946477692257d725acac513f271c4e9e
        Originally reported at:
        http://lists.gnupg.org/pipermail/gnupg- … 00308.html

2017-08-02  Frans Spiesschaert  <Frans.Spiesschaert@yucom.be>

        po: Update Dutch translation.
        + commit 6d5c5204d79fa9d01981c0076d3acde18534640a
        Debian-Bug-Id: 845695

2017-08-01  Manuel Venturi Porras Peralta  <venturi@openmailbox.org>

        po: Update Spanish translation.
        + commit 76239356bcb3bfeec5327637ed87429594868fef
        Debian-Bug-Id: 814541
   2018-04-29 23:32:09 by Adam Ciarcinski | Files touched by this commit (629) | Package updated
Log message:
revbump for boost-libs update
   2018-04-21 15:38:07 by Thomas Klausner | Files touched by this commit (28)
Log message:
*: gd.tuwien.ac.at/ftp.tuwien.ac.at is gone, remove it from various mastersites
   2018-01-02 06:37:24 by Maya Rashish | Files touched by this commit (25)
Log message:
Remove traces of crypto restrictions from packages.

ok for idea riastradh.
   2018-01-01 22:18:57 by Adam Ciarcinski | Files touched by this commit (629) | Package updated
Log message:
Revbump after boost update
   2017-08-24 22:03:43 by Adam Ciarcinski | Files touched by this commit (621) | Package updated
Log message:
Revbump for boost update
   2017-08-14 22:12:00 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
Updated gnupg to 1.4.22.

Noteworthy changes in version 1.4.22 (2017-07-19)
-------------------------------------------------

 * Mitigate a flush+reload side-channel attack on RSA secret keys
   dubbed "Sliding right into disaster".  For details see
   <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526]

 * Fix some minor bugs.
   2017-04-30 03:22:04 by Ryo ONODERA | Files touched by this commit (612) | Package updated
Log message:
Recursive revbump from boost update