lp:ubuntu/lucid-updates/gnupg2

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Marc Deslauriers on 2014-06-26

* SECURITY UPDATE: denial of service via uncompressing garbled packets
  - debian/patches/CVE-2014-4617.patch: limit number of extra bytes in
    g10/compress.c.
  - CVE-2014-4617

16. By Marc Deslauriers on 2013-10-07

* SECURITY UPDATE: incorrect no-usage-permitted flag handling
  - debian/patches/CVE-2013-4351.patch: correctly handle empty key flags
    in g10/getkey.c, g10/keygen.c, include/cipher.h.
  - CVE-2013-4351
* SECURITY UPDATE: denial of service via infinite recursion
  - debian/patches/CVE-2013-4402.patch: set limits on number of filters
    and nested packets in common/iobuf.c, g10/mainproc.c.
  - CVE-2013-4402

15. By Marc Deslauriers on 2013-01-08

* SECURITY UPDATE: keyring corruption via malformed key import
  - debian/patches/CVE-2012-6085.patch: validate PKTTYPE in g10/import.c.
  - CVE-2012-6085

14. By Marc Deslauriers on 2012-08-14

debian/patches/long-keyids.diff: Use the longest key ID available
when requesting a key from a key server.

13. By Michael Bienia on 2010-06-19

Fix a regression in gnupg2 2.0.14 which prevents unprotection of new or
changed gpg-agent passphrases. Patch provided by Werner Koch (upstream)
(lp: #567106).

12. By Michael Bienia on 2010-01-22

* Merge with Debian testing (lp: #511356). Remaining changes:
  - debian/gnupg2.dev: udev rules to set ACLs on SCM smartcard readers.
  - debian/rules: Call dh_installudev.

11. By Michael Bienia on 2009-11-07

* Merge with Debian testing (lp: #477491). Remaining changes:
  - Build-depend on libreadline-dev instead of libreadline5-dev.
  - debian/gnupg2.dev: udev rules to set ACLs on SCM smartcard readers.
  - debian/rules: Call dh_installudev.

10. By Matthias Klose on 2009-09-19

Build-depend on libreadline-dev instead of libreadline5-dev.

9. By Soren Hansen on 2009-08-04

* New upstream release.
* Add 01-scd-pw2.patch, 03-opgp-writekey.patch, and 06-opgp-sign3072.patch
  from https://bugs.g10code.com/gnupg/issue1094 to make OpenPGP 2.0
  smartcards work.

8. By Michael Bienia on 2009-07-03

* debian/gnupg2.udev:
  Add udev rules to set ACLs on SCM smartcard readers. They replace the hal
  rules for the same purpose. (LP: #57755)
* debian/rules:
  Call dh_installudev.