Sophie

• Search
• Distribution
• Explorer
• Source & Patches
• Chat
• Help
• About

distrib > Scientific%20Linux > 5x > x86_64 > by-pkgid > bd9c44181812cb2a73fa723d67bef11d > changelog

gnupg-1.4.5-18.el5_10.x86_64.rpm

• Info
• Deps
• Files
• Scripts
• ChangeLog
• Location
• Others versions
• Analyse

• Sat Oct 12 2013 Tomas Mraz <tmraz@redhat.com> - 1.4.5-18

  - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted

• Fri Oct 11 2013 Tomas Mraz <tmraz@redhat.com> - 1.4.5-17

  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser

• Fri Jun 11 2010 Tomas Mraz <tmraz@redhat.com> - 1.4.5-15

  - fix error when decrypting certain files (#510500)

• Fri Jun 27 2008 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14

  - add patch from David Shaw to fix incorrectly detecting multiple plaintexts
  when processing multiple input files (#442815)

• Fri Mar 2 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13

  - incorporate patch from Werner to work around clients which
  can't tell that multiple plain messages have been processed (#230457)

• Wed Dec 6 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-12

  - don't apply the non-critical termlib patch

• Wed Dec 6 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-11

  - rebuild

• Wed Dec 6 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-10

  - incorporate patch from Werner to fix use of stack variable after it goes
  out of scope (CVE-2006-6235, #218483)

• Sat Dec 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-9

  - rebuild
  - give configure a --with-termlib option which can be used to force the
  selection of libtermcap or libncurses, but don't flip the switch yet

• Sat Dec 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-8

  - rebuild

• Sat Dec 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-7

  - rebuild

• Sat Dec 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-6

  - add patch for overflow in openfile.c from Werner's mail (CVE-2006-6169)

• Wed Nov 1 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-5

  - rebuild against current libcurl

• Sat Aug 19 2006 Jesse Keating <jkeating@redhat.com> - 1.4.5-4

  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
  (#203001)

• Wed Aug 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-3

  - rebuild

• Wed Aug 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-2

  - rebuild
  - reenable curl support

• Wed Aug 2 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-1

  - update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
  CVE-2006-3746)
  - temporarily disable curl support again

• Sat Jul 29 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4.90-1

  - update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
  to avoid looking "newer" than the eventual 1.4.5
  - because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT

• Fri Jul 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-7

  - add BuildPrereq on curl-devel to get curl's ipv6 support (#198375)

• Thu Jul 13 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-6

  - fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
  detection (#198612)

• Thu Jul 13 2006 Jesse Keating <jkeating@redhat.com> - 1.4.4-5.1

  - rebuild

• Thu Jul 6 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-5

  - try again using per-platform buildprereq (jkeating)

• Thu Jul 6 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-4

  - buildprereq libusb-devel, so that we get CCID support back (#197450)

• Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-3

  - rebuild

• Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-2

  - rebuild

• Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-1

  - update to 1.4.4

• Wed Jun 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-5

  - rebuild

• Wed Jun 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-4

  - add patch from upstream to fix CVE-2006-3082 (#195946)

• Wed Apr 12 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-3

  - rebuild

• Wed Apr 12 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-2

  - apply patch from David Shaw to try multiple defaults if the the photo-viewer
  option isn't set (fixes #187880)

• Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-1

  - update to 1.4.3

• Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.2-2

  - rebuild

• Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.2-1

  - update to 1.4.2.2 to fix detection of unsigned data (CVE-2006-0049, #185111)

• Tue Feb 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-4

  - rebuild

• Tue Feb 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-3

  - add patch from David Shaw to fix error reading keyrings created with older
  versions of GnuPG (Enrico Scholz, #182163)

• Thu Feb 16 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-2

  - rebuild

• Thu Feb 16 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-1

  - update to 1.4.2.1 (fixes CVE-2006-0455)

• Sat Feb 11 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2.1

  - bump again for double-long bug on ppc(64)

• Wed Feb 8 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2

  - rebuilt for new gcc4.1 snapshot and glibc changes

• Sat Dec 10 2005 Jesse Keating <jkeating@redhat.com>

  - rebuilt

• Wed Aug 10 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3

  - don't override libexecdir any more; we don't need to (#165462)

• Fri Aug 5 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2

  - pull in David Shaw's fix for key generation in batch mode

• Sat Jul 30 2005 Nalin Dahyabhai <nalin@redhat.com>

  - change %post to check if the info files are there before attempting to
  add or remove them from the info index (#91641)

• Thu Jul 28 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1

  - update to 1.4.2

• Fri May 6 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3

  - fix the execstack problem correctly this time (arjanv)

• Fri Apr 29 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-2

  - add -Wa,--noexecstack back to CFLAGS when invoking configure, the
  --enable-noexecstack flag only seems to affect asm modules

• Thu Mar 17 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1

  - update to 1.4.1

• Wed Mar 9 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.0-2

  - build asm modules with -Wa,--noexecstack

• Tue Jan 25 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.0-1

  - comment out libusb-devel req for now so that we can build
  - build the mpi asm modules with gcc, not a cpp/as setup so that we don't end
  up with text relocations in the resulting binaries (#145836)

• Thu Dec 23 2004 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.4.0

• Tue Nov 2 2004 Nalin Dahyabhai <nalin@redhat.com>

  - add a pile of buildprereq

• Tue Nov 2 2004 Robert Scheck <redhat@linuxnetz.de> 1.2.6-2

  - set LANG=C before running shm coprocessing build-time check (#129873)

• Fri Aug 27 2004 Nalin Dahyabhai <nalin@redhat.com> 1.2.6-1

  - update to 1.2.6

• Wed Jul 28 2004 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.2.5
  - reenable optimization on ppc64

• Wed Jun 16 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed Mar 3 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Sat Feb 14 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Sat Feb 7 2004 Nalin Dahyabhai <nalin@redhat.com> 1.2.4-1

  - update to 1.2.4, dropping separate ElGamal disabling patch

• Sat Dec 13 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-3

  - rebuild

• Tue Dec 2 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-2

  - incorporate patch from gnupg-announce which removes the ability to create
  ElGamal encrypt+sign keys or to sign messages with such keys

• Tue Oct 28 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1

  - use -fPIE instead of -fpie because some arches need it

• Tue Oct 28 2003 Nalin Dahyabhai <nalin@redhat.com>

  - build gnupg as a position-independent executable (Arjan van de Ven)

• Tue Aug 26 2003 Nalin Dahyabhai <nalin@redhat.com>

  - add Werner's key as a source file

• Sat Aug 23 2003 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.2.3

• Fri Jun 20 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-3

  - disable asm and optimization on ppc64

• Sat Jun 14 2003 Nalin Dahyabhai <nalin@redhat.com>

  - add a build-time check to ensure that shm coprocessing was enabled

• Thu Jun 5 2003 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Tue May 6 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-1

  - update to 1.2.2, fixing CAN-2003-0255

• Fri May 2 2003 Elliot Lee <sopwith@redhat.com> 1.2.1-5

  - Add ppc64 patch to fix up global symbol names in assembly

• Sat Mar 1 2003 Kevin Sonney <ksonney@redhat.com> 1.2.1-4

  - remove autoconf call on sparc

• Sat Feb 8 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-3

  - modify g10defs to look for helpers in libexecdir, because that's where they
  get installed, per gnupg-users
  - actually drop updates for 1.0.7 which are no longer needed for 1.2.1

• Thu Jan 23 2003 Tim Powers <timp@redhat.com>

  - rebuilt

• Tue Oct 29 2002 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-1

  - update to 1.2.1

• Wed Sep 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.2.0-1

  - update to 1.2.0
  - stop stripping files manually, let the buildroot policies handle it
  - add translations updates ca and fr

• Wed Aug 28 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-6

  - rebuild

• Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-5

  - specify a menu entry when installing info pages

• Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-4

  - add and install info pages (#67931)
  - don't include two copies of the faq, add new doc files (#67931)

• Sat Jun 22 2002 Tim Powers <timp@redhat.com>

  - automated rebuild

• Mon May 27 2002 Tim Powers <timp@redhat.com>

  - automated rebuild

• Wed May 1 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-1

  - update to 1.0.7

• Sat Feb 23 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-5

  - rebuild

• Thu Jan 24 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-4

  - make the codeset patch unconditional

• Fri Aug 10 2001 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-3

  - set message output encoding to match the message encoding, based on a
  patch by goeran@uddeborg.pp.se (#49182)

• Mon Jun 25 2001 Elliot Lee <sopwith@redhat.com> 1.0.6-2

  - Bump release + rebuild.

• Thu May 31 2001 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-1

  - update to 1.0.6, fixes format string exploit

• Tue May 1 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.0.5, dropping various patches

• Wed Feb 28 2001 Trond Eivind Glomsrød <teg@redhat.com>

  - langify
  - strip binaries in /usr/lib/gnupg

• Wed Feb 28 2001 Nalin Dahyabhai <nalin@redhat.com>

  - fix the group

• Tue Dec 19 2000 Nalin Dahyabhai <nalin@redhat.com>

  - go with this version -- 1.0.4c includes a lot of changes beyond just the
  two security fixes

• Fri Dec 15 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add the --allow-secret-key-import patch from CVS in case we don't get a 1.0.5

• Sat Dec 9 2000 Nalin Dahyabhai <nalin@redhat.com>

  - build as an errata for 7

• Sat Dec 2 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add a security patch for a problem with detached signature verification...
  might hold off for an impending 1.0.5, though

• Fri Oct 20 2000 Nalin Dahyabhai <nalin@redhat.com>

  - fix a bug preventing creation of .gnupg directories

• Thu Oct 19 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add patch to recognize AES signatures properly (#19312)
  - add gpgv to the package

• Wed Oct 18 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.0.4 to get security fix

• Wed Oct 11 2000 Nalin Dahyabhai <nalin@redhat.com>

  - fix man page typos (#18797)

• Fri Sep 22 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.0.3
  - switch to bundled copy of the man page

• Thu Aug 31 2000 Matt Wilson <msw@redhat.com>

  - rebuild to cope with glibc locale binary incompatibility, again

• Thu Aug 17 2000 Nalin Dahyabhai <nalin@redhat.com>

  - revert locale patch (#16222)

• Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com>

  - set all locale data instead of LC_MESSAGES and LC_TIME (#16222)

• Mon Jul 24 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.0.2

• Thu Jul 20 2000 Jakub Jelinek <jakub@redhat.com>

  - rebuild to cope with glibc locale binary incompatibility

• Fri Jul 14 2000 Prospector <bugzilla@redhat.com>

  - automatic rebuild

• Thu Jul 13 2000 Nalin Dahyabhai <nalin@redhat.com>

  - include lspgpot (#13772)

• Tue Jun 6 2000 Nalin Dahyabhai <nalin@redhat.com>

  - rebuild in new build environment

• Sat Feb 19 2000 Bill Nottingham <notting@redhat.com>

  - build of 1.0.1

• Sat Sep 11 1999 Cristian Gafton <gafton@redhat.com>

  - version 1.0.0 build for 6.1us