File gpg2.changes of Package gpg2

-------------------------------------------------------------------
Sat Oct  5 18:41:23 UTC 2013 - andreas.stieger@gmx.de

- fix denial of service through infinite recursion in the compressed
  packet parser [bnc#844175] [CVE-2013-4402] 
- gpg2-CVE-2013-4402.patch

-------------------------------------------------------------------
Mon Sep 16 11:08:55 UTC 2013 - vcizek@suse.com

- fix CVE-2013-4351 (bnc#840510)

-------------------------------------------------------------------
Mon May 13 13:08:03 UTC 2013 - vcizek@suse.com

- security fixes:
  * fix for CVE-2012-6085 (bnc#798465)
    added gpg2-CVE-2012-6085.patch
  * fix for bnc#780943
    added gpg2-set_umask_before_open_outfile.patch

-------------------------------------------------------------------
Wed Jul 28 09:50:44 UTC 2010 - puzel@novell.com

- gnupg-CVE-2010-2547.patch (bnc#625947) 

-------------------------------------------------------------------
Thu Jun 18 13:22:00 CEST 2009 - puzel@novell.com

- update to gnupg-2.0.12
 * GPGSM now always lists ephemeral certificates if specified by
   fingerprint or keygrip.
 * New command "KEYINFO" for GPG_AGENT.  GPGSM now also returns
   information about smartcards.
 * Made sure not to leak file descriptors if running gpg-agent with a
   command.  Restore the signal mask to solve a problem in Mono.
 * Changed order of the confirmation questions for root certificates
   and store negative answers in trustlist.txt.
 * Better synchronization of concurrent smartcard sessions.
 * Support 2048 bit OpenPGP cards.
 * Support Telesec Netkey 3 cards.
 * The gpg-protect-tool now uses gpg-agent via libassuan.
 * Changed code to avoid a possible Mac OS X system freeze.
- drop gpg2-fix-rtsignals.patch (fixed upstream)
- drop gnupg-1.9.22-ccid-driver-fix.diff (unused)

-------------------------------------------------------------------
Thu Jun 11 11:19:58 CEST 2009 - puzel@suse.cz

- change BuildRequires: (pth-devel -> libpth-devel) 

-------------------------------------------------------------------
Mon Jun  1 11:26:12 CEST 2009 - puzel@suse.cz

- BuildRequires: pth-devel 

-------------------------------------------------------------------
Wed Mar 18 13:51:30 CET 2009 - puzel@suse.cz

- add gpg2-fix-rtsignals.patch (bnc#481463)

-------------------------------------------------------------------
Thu Mar  5 13:39:42 CET 2009 - puzel@suse.cz

- update to 2.0.11
  * Fixed a problem in SCDAEMON which caused unexpected card resets.
  * SCDAEMON is now aware of the Geldkarte.
  * The SCDAEMON option --allow-admin is now used by default.
  * GPGCONF now restarts SCdaemon if necessary.
  * The default cipher algorithm in GPGSM is now again 3DES.  This is
    due to interoperability problems with Outlook 2003 which still
    can't cope with AES.
- dropped gnupg-2.0.10-fix-convert.patch (upstream)
- dropped gnupg-2.0.10-fix-missing-option.patch (upstream)
- disabled gnupg-1.9.22-ccid-driver-fix.diff (does not apply and it is
  not clear what it is good for)

-------------------------------------------------------------------
Mon Mar  2 15:53:22 CET 2009 - puzel@suse.cz

- gnupg-2.0.10-fix-missing-option.patch (bnc#477362) 

-------------------------------------------------------------------
Mon Jan 19 16:16:11 CET 2009 - puzel@suse.cz

- add gnupg-2.0.10-fix-convert.patch 
  - fix broken 'make check' on ppc, s390 and s390x

-------------------------------------------------------------------
Tue Jan 13 10:38:38 CET 2009 - puzel@suse.cz

- update to 2.0.10
  * New keyserver helper gpg2keys_kdns as generic DNS CERT
    lookup.  
  * New mechanisms "local" and "nodefault" for --auto-key-locate.
    Fixed a few problems with this option.
  * New command --locate-keys.
  * New options --with-sig-list and --with-sig-check.
  * The option "-sat" is no longer an alias for --clearsign.
  * The option --fixed-list-mode is now implicitly used and obsolete.
  * New control statement %ask-passphrase for the unattended key
    generation.
  * The algorithm to compute the SIG_ID status has been changed.
  * [gpgsm] Now uses AES by default.
  * [gpgsm] Made --output option work with --export-secret-key-p12.
  * [gpg-agent] Terminate process if the own listening socket is not
    anymore served by ourself.
  * [gpg-connect-agent] Accept commands given as command line arguments.
  * The gpg-preset-passphrase mechanism works again. An arbitrary
    string may now be used for a custom cache ID.
  * Admin PINs are cached again (bug in 2.0.9).
  * Support for version 2 OpenPGP cards.

- specfile changes:
  * require libadns 
  * explicit versions for some BuildRequires
  * BuildRequires libgpg-error
  * changed license to GPL v3
  * /etc/gnupg/gnupg.conf is now (noreplace)
  * documentation is installed with install

-------------------------------------------------------------------
Wed Jun 11 11:06:09 CEST 2008 - puzel@suse.cz

- fix [bnc#305725] - UTF-8 problems
  * non latin characters displayed incorrectly by pinentry-*

-------------------------------------------------------------------
Wed May 21 14:01:14 CEST 2008 - puzel@suse.cz

- added missing gpgconf.conf (bnc#391347)

-------------------------------------------------------------------
Fri Mar 28 16:14:33 CET 2008 - pcerny@suse.cz

- update to 2.0.9
  * fixes CVE-2008-1530 (bnc#374254)
  * removing gnupg-2.0.8-from-upstream.diff (included in release)
  * removing gnupg-2.0.4-oldkey.diff (accepted by upstream)
  * removing gnupg-2.0.8-warningfixes.diff 
    (also appears in upstream)
- patch gnupg-2.0.9-RSA_ES.patch
  * adding back support for deprecated RSA_E, RSA_S algorithms
    (bnc#342979)

-------------------------------------------------------------------
Wed Mar 26 22:07:29 CET 2008 - coolo@suse.de

- require the split out lang package

-------------------------------------------------------------------
Sun Mar 23 12:10:56 CET 2008 - coolo@suse.de

- splitting out a third of the package by using a lang subpack

-------------------------------------------------------------------
Tue Feb 12 19:24:37 CET 2008 - bk@suse.de

- install gpg-zip and gpgsplit again and use -pie for randomisation

-------------------------------------------------------------------
Wed Feb  6 18:16:34 CET 2008 - bk@suse.de

- add selected upstream fixes and fix gcc and rpmlint warnings 

-------------------------------------------------------------------
Tue Jan  8 10:48:30 CET 2008 - sassmann@suse.de

- update to GnuPG-2.0.8
- adapted patches to apply properly
  * gnupg-1.9.18-tmpdir.diff
  * gnupg-2.0.4-install_tools.diff
- gnupg-2.0.5.fixes-from-svn-20070812.diff commented out,
  included in upstream 2.0.8
- use optflags during build

-------------------------------------------------------------------
Wed Sep 12 22:40:46 CEST 2007 - ltinkl@suse.cz

- fix #304749 - gpg2 unable to use old secret key

-------------------------------------------------------------------
Mon Sep 10 20:13:07 CEST 2007 - ltinkl@suse.cz

- fix gpg2 crash on accessing key (#307666)
- fix gpg doesn't work on the console (#302323)

-------------------------------------------------------------------
Fri Aug 10 11:50:20 CEST 2007 - bk@suse.de

- update to GnuPG-2.0.5             - requries libassuan-1.0.2!
  * Switched license to GPLv3.
  * Fixed bug when using the --p12-charset without --armor.
  * The command --gen-key may now be used instead of the
    gpgsm-gencert.sh script.
  * Changed key generation to reveal less information about the
    machine.  Bug fixes for gpg2's card key generation.
- enable make check to test against build issues in the crypto engine
- cleanup disabled nld patch for linking with -lgpg-error-nld
- use %find_lang to label the locale files properly with %lang
- add opensc-devel to BuildRequrires to enanble smartcard support
- del Makefile.in patches where we patch Makefile.am and run automake
- cleanup the standrd GNU INSTALL and the empty VERSION from %doc

-------------------------------------------------------------------
Thu Jul 26 13:16:22 CEST 2007 - sbrabec@suse.cz

- Build with libassuan-devel.

-------------------------------------------------------------------
Thu Jun 21 20:31:44 CEST 2007 - ro@suse.de

- install compat symlinks for gpg2 and gpgv2
- install gpg-zip and gpgsplit
- added openldap2 to buildrequires (for gpgkeys_ldap) 
- added fPIE/pie to CFLAGS/LDFLAGS for gpgsplit

-------------------------------------------------------------------
Wed May 23 19:02:45 CEST 2007 - dmueller@suse.de

- add libusb-devel build requires

-------------------------------------------------------------------
Wed May 16 14:27:28 CEST 2007 - ltinkl@suse.cz

- remove gpg from Require's (#273491)

-------------------------------------------------------------------
Fri May 11 13:20:19 CEST 2007 - ltinkl@suse.cz

- updated to 2.0.4 stable snapshot

-------------------------------------------------------------------
Wed Apr  4 12:42:06 CEST 2007 - ltinkl@suse.cz

- update to 2.0.3
- fixed #251605 - VUL-0: signing issues within GNUPG
- removed outdated patches

-------------------------------------------------------------------
Fri Mar 30 01:58:56 CEST 2007 - ro@suse.de

- added zlib-devel to buildreq 

-------------------------------------------------------------------
Wed Feb 14 15:14:44 CET 2007 - ltinkl@suse.cz

- fix file conflicts with gpg (#242133)

-------------------------------------------------------------------
Tue Jan 30 00:34:50 CET 2007 - ro@suse.de

- fix build (exclude possible debuginfo directory) 

-------------------------------------------------------------------
Mon Jan 29 16:22:15 CET 2007 - ltinkl@suse.cz

- fix #221212 - gpg2 is not updated and do not contain documentation
- fix #233525 - gpg1/2: bug in vasprintf() implementation

-------------------------------------------------------------------
Thu Nov 30 16:59:25 CET 2006 - anicka@suse.cz

- fix overflow in openfile.c (CVE-2006-6169, #224108) 

-------------------------------------------------------------------
Mon Sep 11 13:44:21 CEST 2006 - pnemec@suse.cz

- updated gnupg to new version 1.9.22
        Enhanced pkcs#12 support
        Support for the CardMan 4040 PCMCIA
        Collected bug fixes
- updated pth library to 2.0.7
- changed using pinetry-qt to pinentry
- removed -cfb.diff -signature.patch -cap_large_uid.patch patches
  they are no longer needed
- change patch -warnings-fix.diff -ccid-driver-fix.diff

-------------------------------------------------------------------
Thu Aug 17 11:55:09 CEST 2006 - pnemec@suse.de

- remove unused package in build requires

-------------------------------------------------------------------
Wed Aug  9 09:32:56 CEST 2006 - pnemec@suse.cz

- fix spec file to build with new gettext 0.15 

-------------------------------------------------------------------
Mon Aug  7 11:06:19 CEST 2006 - pnemec@suse.cz

- fixed security fix with large uid CVE-2006-3746 [#195569]

-------------------------------------------------------------------
Thu Feb 23 17:07:18 CET 2006 - pnemec@suse.cz

- fixed signature security problem CVE-2006-0455 (bugzilla#150742)

-------------------------------------------------------------------
Thu Feb  2 15:37:22 CET 2006 - pnemec@suse.cz

- fixed install info in spec file

-------------------------------------------------------------------
Thu Jan 26 15:52:26 CET 2006 - sbrabec@suse.cz

- Added missing %install_info.

-------------------------------------------------------------------
Wed Jan 25 21:36:18 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Fri Aug  5 12:52:44 CEST 2005 - postadal@suse.cz

- updated to version to 1.9.18
- removed obsoleted gcc patch
- added patch tmpdir.diff for using $TMPDIR by gpg-agent [#bug95732] 

-------------------------------------------------------------------
Tue Jul 12 14:17:11 CEST 2005 - postadal@suse.cz

- updated to version to 1.9.17
- updated pth to version 2.0.4
- removed obsoleted patch agent-cache-fix.diff
- fixed ccid-driver.c
- fixed gcc4
- explicitly enabled gpg building in configure

-------------------------------------------------------------------
Thu Mar 24 13:55:34 CET 2005 - postadal@suse.cz

- fixed caching passphrase in gpg-agent [#71975]

-------------------------------------------------------------------
Tue Mar 22 18:11:12 CET 2005 - postadal@suse.cz

- fixed on 64bit archs [#72440]

-------------------------------------------------------------------
Wed Feb 23 15:16:55 CET 2005 - postadal@suse.cz

- security fix for cfb-cipher issue [#65862]

-------------------------------------------------------------------
Wed Jan 12 16:02:00 CET 2005 - postadal@suse.cz

- update to version 1.9.14
- removed obsoleted patch automake-fixes.diff

-------------------------------------------------------------------
Tue Sep 28 08:52:32 CEST 2004 - adrian@suse.de

- link against libpth staticaly to make S/MIME support in kmail
  usable. Hopefully we can convert this to a native thread implementation
  later. (#46260)

-------------------------------------------------------------------
Sat Jul 31 15:07:26 CEST 2004 - adrian@suse.de

- update to version 1.9.10

-------------------------------------------------------------------
Tue Jul 20 09:01:50 CEST 2004 - adrian@suse.de

- remove openct and opensc packages from nfb
  (we will need thread support, when enabling card reader support,
   but it isn't anyway implemented yet in gpg2)

-------------------------------------------------------------------
Mon Jul 12 17:55:32 CEST 2004 - adrian@suse.de

- use GnuPG 2 sources version 1.9.9
- opensc support misses some functions atm, support disabled for now
- threading is disabled, since we do not have a pth package for now
- prepare for nld

-------------------------------------------------------------------
Thu Feb 26 13:27:08 CET 2004 - postadal@suse.cz

- adapted some functions to the libgcrypt version 1.1.91 [#34987]
- added libgpg-error to needforbuild flag

-------------------------------------------------------------------
Wed Feb 18 14:02:47 CET 2004 - kukuk@suse.de

- Don't build against libpth.

-------------------------------------------------------------------
Tue Feb 10 16:00:08 CET 2004 - postadal@suse.cz

- fixed code that broke strict aliasing

-------------------------------------------------------------------
Fri Dec  5 14:35:32 CET 2003 - garloff@suse.de

- disable core dumpe in child after forking. [#33499]

-------------------------------------------------------------------
Mon Aug 11 14:48:50 CEST 2003 - adrian@suse.de

- cleanup #neededforbuild and requires

-------------------------------------------------------------------
Mon Aug  4 15:28:41 CEST 2003 - ro@suse.de

- added openct to neededforbuild 

-------------------------------------------------------------------
Fri Jul 18 14:23:15 CEST 2003 - mc@suse.de

- build against opensc 

-------------------------------------------------------------------
Thu Jun 19 19:04:45 CEST 2003 - schwab@suse.de

- Add %install_info.

-------------------------------------------------------------------
Mon Mar 17 15:25:30 CET 2003 - adrian@suse.de

- add signal handler to check if the parent is still alive and
  exit if not
- use pinentry-qt by default (/usr/bin/pinentry do not exist)

-------------------------------------------------------------------
Tue Feb 11 15:38:30 CET 2003 - mc@suse.de

- initial release