[ubuntu/utopic-proposed] gnupg 1.4.16-1.2ubuntu1 (Accepted)

[Marc Deslauriers]

gnupg (1.4.16-1.2ubuntu1) utopic; urgency=medium

  * Resynchronise with Debian. Remaining changes:
    - Disable mlock() test since it fails with ulimit 0 (on buildds).
    - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
    - Only suggest gnupg-curl and libldap; recommendations are pulled into
      minimal, and we don't need the keyserver utilities in a minimal Ubuntu
      system.
    - Remove the Win32 build.
    - Build using dh-autoreconf
    - Disable inline assembler for ppc64el.

gnupg (1.4.16-1.2) unstable; urgency=high

  * Non-maintainer upload with maintainers approval.
  * CVE-2014-4617: Avoid DoS due to garbled compressed data packets.
    Apply upstream commit to stop a possible DoS using garbled compressed
    data packets which can be used to put gpg into an infinite loop.
    (Closes: #752497)

gnupg (1.4.16-1.1) unstable; urgency=low

  * Non-Maintainer Upload.
  * Initialize trustdb before clearing it (Closes: #735363)

Date: Thu, 26 Jun 2014 14:41:40 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/utopic/+source/gnupg/1.4.16-1.2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 26 Jun 2014 14:41:40 -0400
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb
Architecture: source
Version: 1.4.16-1.2ubuntu1
Distribution: utopic
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 gnupg      - GNU privacy guard - a free PGP replacement
 gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
 gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-udeb  - minimal signature verification tool (udeb)
Closes: 735363 752497
Changes:
 gnupg (1.4.16-1.2ubuntu1) utopic; urgency=medium
 .
   * Resynchronise with Debian. Remaining changes:
     - Disable mlock() test since it fails with ulimit 0 (on buildds).
     - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
     - Only suggest gnupg-curl and libldap; recommendations are pulled into
       minimal, and we don't need the keyserver utilities in a minimal Ubuntu
       system.
     - Remove the Win32 build.
     - Build using dh-autoreconf
     - Disable inline assembler for ppc64el.
 .
 gnupg (1.4.16-1.2) unstable; urgency=high
 .
   * Non-maintainer upload with maintainers approval.
   * CVE-2014-4617: Avoid DoS due to garbled compressed data packets.
     Apply upstream commit to stop a possible DoS using garbled compressed
     data packets which can be used to put gpg into an infinite loop.
     (Closes: #752497)
 .
 gnupg (1.4.16-1.1) unstable; urgency=low
 .
   * Non-Maintainer Upload.
   * Initialize trustdb before clearing it (Closes: #735363)
Checksums-Sha1:
 e25eea832cd624f47534d0b9faf005e66959133b 2395 gnupg_1.4.16-1.2ubuntu1.dsc
 ea40324a5b2e3a16ffb63ea0ccc950a3faf5b11c 5073484 gnupg_1.4.16.orig.tar.gz
 380f38a6ef2757af2a4559b2ac603cc26e2567b3 30612 gnupg_1.4.16-1.2ubuntu1.debian.tar.xz
Checksums-Sha256:
 603e36b17a6e64d9f01d724c591d97976e45b5f97789d04d255d5b703411192b 2395 gnupg_1.4.16-1.2ubuntu1.dsc
 f3af2f9c34c305869ad38b4ee7ab9e1487f50884ee8d9d42cccb31e1ced5cdef 5073484 gnupg_1.4.16.orig.tar.gz
 374791f4056f928305317c301b87ba46f65706bfddea571318ac385537161135 30612 gnupg_1.4.16-1.2ubuntu1.debian.tar.xz
Files:
 b6d99d778cb7c6225b77e5640be64b5d 2395 utils important gnupg_1.4.16-1.2ubuntu1.dsc
 3d46439c5ba304dd2cfc9070a5ce1338 5073484 utils important gnupg_1.4.16.orig.tar.gz
 dd1b9884aea1413092b24b63a64ecfb3 30612 utils important gnupg_1.4.16-1.2ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=bG/R
-----END PGP SIGNATURE-----