-
gnupg2 (2.0.14-2+squeeze2) squeeze-security; urgency=low
* debian/patches/{05-cve-2013-4402_p1.diff,06-cve-2013-4402_p2.diff}:
Fix for CVE-2013-4402, "infinite recursion in the compressed packet
parser". (Closes: #725433)
* debian/patches/07-cve-2013-4351.diff: Fix for CVE-2013-4351, "treats
no-usage-permitted keys as all-usages-permitted". (Closes: #722724)
-- Eric Dorland <email address hidden> Tue, 08 Oct 2013 18:27:16 -0400
-
gnupg2 (2.0.14-2+squeeze1) stable-security; urgency=high
* debian/patches/04-cve-2012-6085.diff: Patch from upstream to fix
CVE-2012-6085, "gnupg key import memory corruption". (Closes: #697251)
* debian/rules: Remove linking of config.{guess,sub} and creation of the
version file on clean that breaks newer dpkg-source.
-- Eric Dorland <email address hidden> Sat, 05 Jan 2013 00:28:47 -0500
-
gnupg2 (2.0.14-2) unstable; urgency=low
* debian/*.lintian, debian/*.lintian-overrides, debian/rules: Rename
lintian files and use dh_lintian instead of shell snippets.
* debian/source/patch-header, debian/source/options: Delete patch header
and remove single-debian-patch option.
* debian/patches/01-gnupg2-rename.diff: Move patch to do the necessary
renaming of gnupg -> gnupg2 in a quilt patch.
* debian/patches/02-encode-s2k.diff: Added patch to fix passphrase
problem in gpgsm. Thanks Martijn van Brummelen for the NMU to fix this
problem in 2.0.14-1.1.
* debian/patches/03-gpgsm-realloc.diff: Fix for "Realloc Bug with X.509
certificates" for gpgsm. (Closes: #590122)
* debian/rules, debian/control: Use dh-autoreconf and autopoint to
regenerate autotools files at build time.
-- Eric Dorland <email address hidden> Sun, 25 Jul 2010 02:16:42 -0400
-
gnupg2 (2.0.14-1.1) unstable; urgency=low
* Non-maintainer upload.
* Added encode-s2k.patch(Encode the s2kcount and do not use a
static value of 96.(thanks to Werner Koch) (closes: #567926).
-- Martijn van Brummelen <email address hidden> Fri, 07 May 2010 06:23:55 +0200
-
gnupg2 (2.0.14-1) unstable; urgency=low
* New upstream release.
* debian/control: Build depend on libreadline-dev instead of
libreadline5-dev, since libreadline6-dev is out. (Closes: #548922)
* debian/source/format, debian/source/options,
debian/source/patch-header: Convert to v3 quilt format, with
single-debian-patch.
* debian/control: Tighten dependency on gnupg-agent. (Closes: #551792)
-- Eric Dorland <email address hidden> Sat, 09 Jan 2010 21:15:18 -0500
-
gnupg2 (2.0.13-1) unstable; urgency=low
* New upstream release.
* debian/control: Depend instead of Recommend gnupg-agent. (Closes:
#538947)
-- Eric Dorland <email address hidden> Mon, 07 Sep 2009 20:38:23 -0400
-
gnupg2 (2.0.12-1) unstable; urgency=low
* New upstream release. (Closes: #499569, #463270, #446494, #314068,
#519375, #514587)
* debian/control: Change build dependency on gs to ghoscript, since
ghoscript has been replaced.
* debian/compat: Use debhelper v7.
* debian/control: Update Standards-Version to 3.8.2.
* debian/control: Use ${misc:Depends}.
* configure.ac: Override pkgdatadir so that it points to
/usr/share/gnupg2. (Closes: #528734)
* debian/rules: No longer need to specify pkgdatadir at make install
time.
-- Eric Dorland <email address hidden> Sun, 23 Aug 2009 20:48:11 -0400
-
gnupg2 (2.0.11-1) unstable; urgency=low
* New upstream release. (Closes: #496663)
* debian/control: Make the description a little more distinctive than
gnupg v1's. Thanks Jari Aalto. (Closes: #496323)
-- Eric Dorland <email address hidden> Sun, 08 Mar 2009 22:46:47 -0400
-
gnupg2 (2.0.9-3.1) unstable; urgency=low
* Non-maintainer upload.
* agent/gpg-agent.c: Deinit the threading library before exec'ing
the command to run in --daemon mode. And because that still doesn't
restore the sigprocmask, do that manually. Closes: #499569
-- Thomas Viehmann <email address hidden> Sat, 04 Oct 2008 10:25:53 +0200
