[ubuntu/vivid-proposed] gnupg 1.4.18-7ubuntu1 (Accepted)

[Colin Watson]

gnupg (1.4.18-7ubuntu1) vivid; urgency=medium

  * Resynchronise with Debian.  Remaining changes:
    - Disable mlock() test since it fails with ulimit 0 (on buildds).
    - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
    - Only suggest gnupg-curl and libldap; recommendations are pulled into
      minimal, and we don't need the keyserver utilities in a minimal Ubuntu
      system.
    - Remove the Win32 build.
    - Build using dh-autoreconf.
    - Disable inline assembler for ppc64el.
    - Enable SHA-512 support in gpgv-udeb.

gnupg (1.4.18-7) unstable; urgency=medium

  * import a series of DoS and vulnerabilities from upstream, including
    CVE-2014-3591

Date: Sun, 08 Mar 2015 09:26:02 +0000
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnupg/1.4.18-7ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 08 Mar 2015 09:26:02 +0000
Source: gnupg
Binary: gnupg gnupg-curl gpgv gnupg-udeb gpgv-udeb
Architecture: source
Version: 1.4.18-7ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description:
 gnupg      - GNU privacy guard - a free PGP replacement
 gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
 gnupg-udeb - GNU privacy guard - a free PGP replacement (udeb)
 gpgv       - GNU privacy guard - signature verification tool
 gpgv-udeb  - minimal signature verification tool (udeb)
Changes:
 gnupg (1.4.18-7ubuntu1) vivid; urgency=medium
 .
   * Resynchronise with Debian.  Remaining changes:
     - Disable mlock() test since it fails with ulimit 0 (on buildds).
     - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
     - Only suggest gnupg-curl and libldap; recommendations are pulled into
       minimal, and we don't need the keyserver utilities in a minimal Ubuntu
       system.
     - Remove the Win32 build.
     - Build using dh-autoreconf.
     - Disable inline assembler for ppc64el.
     - Enable SHA-512 support in gpgv-udeb.
 .
 gnupg (1.4.18-7) unstable; urgency=medium
 .
   * import a series of DoS and vulnerabilities from upstream, including
     CVE-2014-3591
Checksums-Sha1:
 596aecbc0804917416dd01c7e2981f2090707b07 2488 gnupg_1.4.18-7ubuntu1.dsc
 4b205a2dbc3e7e893a1e39acc26425cc988cad5b 303416 gnupg_1.4.18-7ubuntu1.debian.tar.xz
Checksums-Sha256:
 c6b0c86b45e190a2aa44301896a54996ef08d45a026732d3fff345f30846a973 2488 gnupg_1.4.18-7ubuntu1.dsc
 e4a8df3c6f2b862ed03ed4d0dcad80416022030952c707f0fb33c2b8b9881a1c 303416 gnupg_1.4.18-7ubuntu1.debian.tar.xz
Files:
 f5156ca79d1b3f77d4febfff72eed3a6 2488 utils important gnupg_1.4.18-7ubuntu1.dsc
 efd23931acd2eb12411f54fb07410513 303416 utils important gnupg_1.4.18-7ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Colin Watson <cjwatson at debian.org> -- Debian developer
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=rUKJ
-----END PGP SIGNATURE-----