[el5_latest] gnupg-1.4.5-18.el5_10.1.i386

Name:	gnupg
Version:	1.4.5
Release:	18.el5_10.1
Architecture:	i386
Group:	Applications/System
Size:	4700719
License:	GPL
RPM:	gnupg-1.4.5-18.el5_10.1.i386.rpm
Source RPM:	gnupg-1.4.5-18.el5_10.1.src.rpm
Build Date:	Wed Jan 08 2014
Build Host:	ca-build56.us.oracle.com
Vendor:	Oracle America
URL:	http://www.gnupg.org/
Summary:	A GNU utility for secure communication and data storage.
Description:	GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with any version of PGP2 (PGP2.x uses only IDEA for symmetric-key encryption, which is patented worldwide).

Changelog (Show File list) (Show related packages)

Tue Jan 07 2014 Tomas Mraz <tmraz@redhat.com> - 1.4.5-18.1

- fix CVE-2013-4576 acoustic side channel attack on RSA private keys

Sat Oct 12 2013 Tomas Mraz <tmraz@redhat.com> - 1.4.5-18

- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted

Fri Oct 11 2013 Tomas Mraz <tmraz@redhat.com> - 1.4.5-17

- fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
- fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
- fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser

Fri Jun 11 2010 Tomas Mraz <tmraz@redhat.com> - 1.4.5-15
```
- fix error when decrypting certain files (#510500)
```

Fri Jun 27 2008 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14

- add patch from David Shaw to fix incorrectly detecting multiple plaintexts
  when processing multiple input files (#442815)

Fri Mar 02 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13

- incorporate patch from Werner to work around clients which
  can't tell that multiple plain messages have been processed (#230457)

Wed Dec 06 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-12
```
- don't apply the non-critical termlib patch
```
Wed Dec 06 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-11
```
- rebuild
```

Wed Dec 06 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-10

- incorporate patch from Werner to fix use of stack variable after it goes
  out of scope (CVE-2006-6235, #218483)

Sat Dec 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-9

- rebuild
- give configure a --with-termlib option which can be used to force the
  selection of libtermcap or libncurses, but don't flip the switch yet

Sat Dec 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-8
```
- rebuild
```
Sat Dec 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-7
```
- rebuild
```

Sat Dec 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-6

- add patch for overflow in openfile.c from Werner's mail (CVE-2006-6169)

Wed Nov 01 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-5
```
- rebuild against current libcurl
```

Sat Aug 19 2006 Jesse Keating <jkeating@redhat.com> - 1.4.5-4

- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
  (#203001)

Wed Aug 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-3
```
- rebuild
```
Wed Aug 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-2
```
- rebuild
- reenable curl support
```

Wed Aug 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-1

- update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
  CVE-2006-3746)
- temporarily disable curl support again

Sat Jul 29 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4.90-1

- update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
  to avoid looking "newer" than the eventual 1.4.5
- because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT

Fri Jul 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-7

- add BuildPrereq on curl-devel to get curl's ipv6 support (#198375)

Thu Jul 13 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-6

- fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
  detection (#198612)

Thu Jul 13 2006 Jesse Keating <jkeating@redhat.com> - 1.4.4-5.1
```
- rebuild
```
Thu Jul 06 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-5
```
- try again using per-platform buildprereq (jkeating)
```

Thu Jul 06 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-4

- buildprereq libusb-devel, so that we get CCID support back (#197450)

Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-3
```
- rebuild
```
Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-2
```
- rebuild
```
Tue Jun 27 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-1
```
- update to 1.4.4
```
Wed Jun 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-5
```
- rebuild
```
Wed Jun 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-4
```
- add patch from upstream to fix CVE-2006-3082 (#195946)
```
Wed Apr 12 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-3
```
- rebuild
```

Wed Apr 12 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-2

- apply patch from David Shaw to try multiple defaults if the the photo-viewer
  option isn't set (fixes #187880)

Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-1
```
- update to 1.4.3
```
Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.2-2
```
- rebuild
```

Sat Mar 11 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.2-1

- update to 1.4.2.2 to fix detection of unsigned data (CVE-2006-0049, #185111)

Tue Feb 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-4
```
- rebuild
```

Tue Feb 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-3

- add patch from David Shaw to fix error reading keyrings created with older
  versions of GnuPG (Enrico Scholz, #182163)

Thu Feb 16 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-2
```
- rebuild
```
Thu Feb 16 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-1
```
- update to 1.4.2.1 (fixes CVE-2006-0455)
```
Sat Feb 11 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2.1
```
- bump again for double-long bug on ppc(64)
```
Wed Feb 08 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2
```
- rebuilt for new gcc4.1 snapshot and glibc changes
```
Sat Dec 10 2005 Jesse Keating <jkeating@redhat.com>
```
- rebuilt
```

Wed Aug 10 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3

- don't override libexecdir any more; we don't need to (#165462)

Fri Aug 05 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2

- pull in David Shaw's fix for key generation in batch mode

Sat Jul 30 2005 Nalin Dahyabhai <nalin@redhat.com>

- change %post to check if the info files are there before attempting to
  add or remove them from the info index (#91641)

Thu Jul 28 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1
```
- update to 1.4.2
```
Fri May 06 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
```
- fix the execstack problem correctly this time (arjanv)
```

Fri Apr 29 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-2

- add -Wa,--noexecstack back to CFLAGS when invoking configure, the
  --enable-noexecstack flag only seems to affect asm modules

Thu Mar 17 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
```
- update to 1.4.1
```
Wed Mar 09 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.0-2
```
- build asm modules with -Wa,--noexecstack
```

Tue Jan 25 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.0-1

- comment out libusb-devel req for now so that we can build
- build the mpi asm modules with gcc, not a cpp/as setup so that we don't end
  up with text relocations in the resulting binaries (#145836)

Thu Dec 23 2004 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 1.4.0
```
Tue Nov 02 2004 Nalin Dahyabhai <nalin@redhat.com>
```
- add a pile of buildprereq
```

Tue Nov 02 2004 Robert Scheck <redhat@linuxnetz.de> 1.2.6-2

- set LANG=C before running shm coprocessing build-time check (#129873)

Fri Aug 27 2004 Nalin Dahyabhai <nalin@redhat.com> 1.2.6-1
```
- update to 1.2.6
```

Wed Jul 28 2004 Nalin Dahyabhai <nalin@redhat.com>

- update to 1.2.5
- reenable optimization on ppc64

Wed Jun 16 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Wed Mar 03 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Sat Feb 14 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```

Sat Feb 07 2004 Nalin Dahyabhai <nalin@redhat.com> 1.2.4-1

- update to 1.2.4, dropping separate ElGamal disabling patch

Sat Dec 13 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-3
```
- rebuild
```

Tue Dec 02 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-2

- incorporate patch from gnupg-announce which removes the ability to create
  ElGamal encrypt+sign keys or to sign messages with such keys

Tue Oct 28 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
```
- use -fPIE instead of -fpie because some arches need it
```

Tue Oct 28 2003 Nalin Dahyabhai <nalin@redhat.com>

- build gnupg as a position-independent executable (Arjan van de Ven)

Tue Aug 26 2003 Nalin Dahyabhai <nalin@redhat.com>
```
- add Werner's key as a source file
```
Sat Aug 23 2003 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 1.2.3
```
Fri Jun 20 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-3
```
- disable asm and optimization on ppc64
```

Sat Jun 14 2003 Nalin Dahyabhai <nalin@redhat.com>

- add a build-time check to ensure that shm coprocessing was enabled

Thu Jun 05 2003 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Tue May 06 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-1
```
- update to 1.2.2, fixing CAN-2003-0255
```

Fri May 02 2003 Elliot Lee <sopwith@redhat.com> 1.2.1-5

- Add ppc64 patch to fix up global symbol names in assembly

Sat Mar 01 2003 Kevin Sonney <ksonney@redhat.com> 1.2.1-4
```
- remove autoconf call on sparc
```

Sat Feb 08 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-3

- modify g10defs to look for helpers in libexecdir, because that's where they
  get installed, per gnupg-users
- actually drop updates for 1.0.7 which are no longer needed for 1.2.1

Thu Jan 23 2003 Tim Powers <timp@redhat.com>
```
- rebuilt
```
Tue Oct 29 2002 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-1
```
- update to 1.2.1
```

Wed Sep 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.2.0-1

- update to 1.2.0
- stop stripping files manually, let the buildroot policies handle it
- add translations updates ca and fr

Wed Aug 28 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-6
```
- rebuild
```
Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-5
```
- specify a menu entry when installing info pages
```

Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-4

- add and install info pages (#67931)
- don't include two copies of the faq, add new doc files (#67931)

Sat Jun 22 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Mon May 27 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Wed May 01 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.7-1
```
- update to 1.0.7
```
Sat Feb 23 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-5
```
- rebuild
```
Thu Jan 24 2002 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-4
```
- make the codeset patch unconditional
```

Fri Aug 10 2001 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-3

- set message output encoding to match the message encoding, based on a
  patch by goeran@uddeborg.pp.se (#49182)

Mon Jun 25 2001 Elliot Lee <sopwith@redhat.com> 1.0.6-2
```
- Bump release + rebuild.
```
Thu May 31 2001 Nalin Dahyabhai <nalin@redhat.com> 1.0.6-1
```
- update to 1.0.6, fixes format string exploit
```
Tue May 01 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 1.0.5, dropping various patches
```
Wed Feb 28 2001 Trond Eivind Glomsrød <teg@redhat.com>
```
- langify
- strip binaries in /usr/lib/gnupg
```
Wed Feb 28 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- fix the group
```

Tue Dec 19 2000 Nalin Dahyabhai <nalin@redhat.com>

- go with this version -- 1.0.4c includes a lot of changes beyond just the
  two security fixes

Fri Dec 15 2000 Nalin Dahyabhai <nalin@redhat.com>

- add the --allow-secret-key-import patch from CVS in case we don't get a 1.0.5

Sat Dec 09 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- build as an errata for 7
```

Sat Dec 02 2000 Nalin Dahyabhai <nalin@redhat.com>

- add a security patch for a problem with detached signature verification...
  might hold off for an impending 1.0.5, though

Fri Oct 20 2000 Nalin Dahyabhai <nalin@redhat.com>

- fix a bug preventing creation of .gnupg directories

Thu Oct 19 2000 Nalin Dahyabhai <nalin@redhat.com>

- add patch to recognize AES signatures properly (#19312)
- add gpgv to the package

Wed Oct 18 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 1.0.4 to get security fix
```
Wed Oct 11 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- fix man page typos (#18797)
```

Fri Sep 22 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to 1.0.3
- switch to bundled copy of the man page

Thu Aug 31 2000 Matt Wilson <msw@redhat.com>

- rebuild to cope with glibc locale binary incompatibility, again

Thu Aug 17 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- revert locale patch (#16222)
```

Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com>

- set all locale data instead of LC_MESSAGES and LC_TIME (#16222)

Mon Jul 24 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 1.0.2
```

Thu Jul 20 2000 Jakub Jelinek <jakub@redhat.com>

- rebuild to cope with glibc locale binary incompatibility

Fri Jul 14 2000 Prospector <bugzilla@redhat.com>
```
- automatic rebuild
```
Thu Jul 13 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- include lspgpot (#13772)
```
Tue Jun 06 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- rebuild in new build environment
```
Sat Feb 19 2000 Bill Nottingham <notting@redhat.com>
```
- build of 1.0.1
```
Sat Sep 11 1999 Cristian Gafton <gafton@redhat.com>
```
- version 1.0.0 build for 6.1us
```