commit 3aeb404a1b7b44b196d5b7bde9756e8cef84252d Author: Toshaan Bharvani Date: Mon Jul 11 17:16:38 2022 +0200 initial package creation Signed-off-by: Toshaan Bharvani diff --git a/SOURCES/0001-Rename-package-to-gnupg1-1656282.patch b/SOURCES/0001-Rename-package-to-gnupg1-1656282.patch new file mode 100644 index 0000000..6dc9181 --- /dev/null +++ b/SOURCES/0001-Rename-package-to-gnupg1-1656282.patch @@ -0,0 +1,27 @@ +From 684cf85eeac78fd716f476a6b9678cc11336f8b6 Mon Sep 17 00:00:00 2001 +From: "Brian C. Lane" +Date: Wed, 5 Dec 2018 08:52:51 -0800 +Subject: [PATCH] Rename package to gnupg1 (#1656282) + +gnupg2 is going to start using /usr/bin/gpg so we need to rename the +gnupg v1.4.x version to avoid conflicts. +--- + configure.ac | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/configure.ac b/configure.ac +index e5bf1bc1a..085ebd33e 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -42,7 +42,7 @@ m4_define([mym4_betastring], + m4_define([mym4_isgit],m4_if(mym4_betastring,[],[no],[yes])) + m4_define([mym4_full_version],[mym4_version[]mym4_betastring]) + +-AC_INIT([gnupg],[mym4_full_version], [https://bugs.gnupg.org]) ++AC_INIT([gnupg1],[mym4_full_version], [https://bugs.gnupg.org]) + + + development_version=mym4_isgit +-- +2.19.2 + diff --git a/SOURCES/gnupg-1.4.1-gcc.patch b/SOURCES/gnupg-1.4.1-gcc.patch new file mode 100644 index 0000000..d54328e --- /dev/null +++ b/SOURCES/gnupg-1.4.1-gcc.patch @@ -0,0 +1,46 @@ +From e89e07669e5bb46023f08d5c0b69065a931f9d27 Mon Sep 17 00:00:00 2001 +From: "Brian C. Lane" +Date: Mon, 30 Jan 2012 09:47:40 -0800 +Subject: [PATCH] Call gcc directly to build assembly files, so that CFLAGS + which are needed during preprocessing (-DPIC) get properly + passed to the preprocessor. + +--- + configure.ac | 1 + + mpi/Makefile.am | 5 +++++ + 2 files changed, 6 insertions(+), 0 deletions(-) + +diff --git a/configure.ac b/configure.ac +index 5dc0a52..55d9bc2 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -1398,6 +1398,7 @@ fi + + AM_CONDITIONAL(CROSS_COMPILING, test x$cross_compiling = xyes) + ++AM_CONDITIONAL(USING_GCC, test x$GCC = xyes) + + # add some extra libs here so that previous tests don't fail for + # mysterious reasons - the final link step should bail out. +diff --git a/mpi/Makefile.am b/mpi/Makefile.am +index 7610e27..27d36b8 100644 +--- a/mpi/Makefile.am ++++ b/mpi/Makefile.am +@@ -69,9 +69,14 @@ libmpi_a_LIBADD = $(common_asm_objects) @MPI_EXTRA_ASM_OBJS@ + + # cancel the default rules used by libtool which do not really + # work and add one to cpp .S files ++if USING_GCC ++.S.o: ++ $(COMPILE) $(AM_CCASFLAGS) -c $< ++else + .S.o: + $(CPP) $(INCLUDES) $(DEFS) $< | grep -v '^#' > _$*.s + $(COMPILE) $(AM_CCASFLAGS) -c _$*.s + mv -f _$*.o $*.o ++endif + + .S.lo: +-- +1.7.6.5 + diff --git a/SOURCES/gnupg-shm-coprocessing.expect b/SOURCES/gnupg-shm-coprocessing.expect new file mode 100644 index 0000000..e554420 --- /dev/null +++ b/SOURCES/gnupg-shm-coprocessing.expect @@ -0,0 +1,5 @@ +spawn -noecho ./g10/gpg --homedir . --run-as-shm-coprocess 0 +while {1} { expect { + "shared memory coprocessing is not available" {exit 1} + "Go ahead and type your message" {exit 0} +} } diff --git a/SPECS/gnupg1.spec b/SPECS/gnupg1.spec new file mode 100644 index 0000000..3955ef8 --- /dev/null +++ b/SPECS/gnupg1.spec @@ -0,0 +1,744 @@ +# add -fcommon to the flags until upstream fixes 'multiple definition ...' warnings +%define _legacy_common_support 1 + +Summary: A GNU utility for secure communication and data storage +Name: gnupg1 +Version: 1.4.23 +Release: 18%{?dist} +License: GPLv3+ with exceptions +URL: http://www.gnupg.org/ +Source0: https://gnupg.org/ftp/gcrypt/gnupg/gnupg-%{version}.tar.bz2 +Source1: https://gnupg.org/ftp/gcrypt/gnupg/gnupg-%{version}.tar.bz2.sig +Source2: gnupg-shm-coprocessing.expect +Patch0000: gnupg-1.4.1-gcc.patch +Patch0001: 0001-Rename-package-to-gnupg1-1656282.patch + +BuildRequires: gcc +# Requires autoconf >= 2.60 because earlier autoconf didn't define $localedir. +BuildRequires: autoconf >= 2.60 +BuildRequires: git-core +BuildRequires: automake, bzip2-devel, expect, ncurses-devel +BuildRequires: openldap-devel, readline-devel, zlib-devel, gettext-devel +BuildRequires: curl-devel +BuildRequires: make +%ifnarch s390 s390x +BuildRequires: libusb-devel +%endif +# pgp-tools, perl-GnuPG-Interface include 'Requires: gpg' -- Rex +Provides: gpg1 = %{version}-%{release} + +%description +GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and +creating digital signatures. GnuPG has advanced key management +capabilities and is compliant with the proposed OpenPGP Internet +standard described in RFC2440. Since GnuPG doesn't use any patented +algorithm, it is not compatible with any version of PGP2 (PGP2.x uses +only IDEA for symmetric-key encryption, which is patented worldwide). + +%prep +%autosetup -S git -n gnupg-%{version} +# Convert these files to UTF-8, per rpmlint. +iconv -f iso-8859-15 -t utf-8 THANKS > THANKS.utf8 +mv THANKS.utf8 THANKS +git commit -a -m "run iconv" +git tag -a %{name}-%{version} -m "baseline" + +autoreconf -vif + +%build +configure_flags= + +%ifarch ppc64 sparc64 +configure_flags=--disable-asm +%endif + +export CFLAGS="%{build_cflags} -DPIC" +%configure \ + --disable-rpath \ + --disable-exec \ + --with-zlib --enable-noexecstack \ + $configure_flags +%make_build +env LANG=C expect -f %{SOURCE2} + +%check +make check + +%install +%make_install +sed 's^\.\./g[0-9\.]*/^^g' tools/lspgpot > lspgpot +install -pm755 lspgpot %{buildroot}%{_bindir}/lspgpot +rm -f %{buildroot}/%{_infodir}/dir + +# Rename the binaries +for f in gpg gpgv gpg-zip gpgsplit; do + mv %{buildroot}%{_bindir}/${f} %{buildroot}%{_bindir}/${f}1 +done + +# Rename the manpages +for f in gpg gpgv gpg-zip; do + mv %{buildroot}%{_mandir}/man1/${f}.1 %{buildroot}%{_mandir}/man1/${f}1.1 +done +%find_lang %{name} + +%files -f %{name}.lang +%license COPYING +%doc AUTHORS BUGS NEWS PROJECTS README THANKS TODO +%doc doc/DETAILS doc/HACKING doc/OpenPGP doc/samplekeys.asc +%{_bindir}/gpg1 +%{_bindir}/gpgv1 +%{_bindir}/gpg-zip1 +%{_bindir}/gpgsplit1 +%{_bindir}/lspgpot +%dir %{_datadir}/%{name} +%{_datadir}/%{name}/FAQ +%{_datadir}/%{name}/options.skel +%{_infodir}/gnupg1.info.* +%{_mandir}/man1/gpg-zip1.1.gz +%{_mandir}/man1/gpg1.1.gz +%{_mandir}/man1/gpgv1.1.gz + +%changelog +* Thu May 19 2022 Brian C. Lane - 1.4.23-18 +- Imported into epel9 from rawhide + +* Thu Jan 20 2022 Fedora Release Engineering - 1.4.23-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Thu Jul 22 2021 Fedora Release Engineering - 1.4.23-16 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Tue Jan 26 2021 Fedora Release Engineering - 1.4.23-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Tue Dec 01 2020 Brian C. Lane - 1.4.23-14 +- Add make to BuildRequires + +* Sat Aug 01 2020 Fedora Release Engineering - 1.4.23-13 +- Second attempt - Rebuilt for + https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jul 27 2020 Fedora Release Engineering - 1.4.23-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Thu Feb 06 2020 Brian C. Lane - 1.4.23-11 +- Add -fcommon to the flags to avoid the GCC 10 'multiple definition of ...' warnings + Resolves: rhbz#1799431 + +* Tue Jan 28 2020 Fedora Release Engineering - 1.4.23-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Thu Jul 25 2019 Fedora Release Engineering - 1.4.23-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Wed Apr 24 2019 Björn Esser - 1.4.23-8 +- Remove hardcoded gzip suffix from GNU info pages + +* Sun Feb 17 2019 Igor Gnatenko - 1.4.23-7 +- Rebuild for readline 8.0 + +* Thu Jan 31 2019 Fedora Release Engineering - 1.4.23-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Mon Dec 10 2018 Igor Gnatenko - 1.4.23-5 +- Pass -DPIC to CFLAGS + +* Sat Dec 08 2018 Igor Gnatenko - 1.4.23-4 +- Use CFLAGS/LDFLAGS provided by RPM + +* Wed Dec 05 2018 Brian C. Lane - 1.4.23-3 +- Rename the package to gnupg1 (#1656282) +- Rename the binarys to gpg1, gpgv1, gpg-zip1, gpgsplit1 (#1656282) +- Remove keyserver support at the suggestion of upstream (#1656282) + +* Fri Jul 13 2018 Fedora Release Engineering - 1.4.23-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Fri Jun 15 2018 Brian C. Lane - 1.4.23-1 +- New upstream v1.4.23 (#1589802,#1589620,#1589624) +- Remove patches included in upstream release +- Note that this includes the fix for [CVE-2018-12020] + +* Fri Jun 08 2018 Brian C. Lane - 1.4.22-7 +- doc Remove documentation for future option faked sys +- build Don't use dev srandom on OpenBSD +- Do not use C99 feature +- g10 Fix regexp sanitization +- g10 Push compress filter only if compressed +- gpg Sanitize diagnostic with the original file name [CVE-2018-12020] + +* Mon Feb 19 2018 Brian C. Lane - 1.4.22-6 +- Add gcc BuildRequires for future minimal buildroot support + +* Fri Feb 09 2018 Igor Gnatenko - 1.4.22-5 +- Escape macros in %%changelog + +* Wed Feb 07 2018 Fedora Release Engineering - 1.4.22-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Wed Aug 02 2017 Fedora Release Engineering - 1.4.22-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 1.4.22-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu Jul 20 2017 Brian C. Lane - 1.4.22-1 +- Removed workaround for ARM build problems fixed by upstream. +- Switch to using %%autosetup macro +- Update Source to use https instead of ftp +- New upstream v1.4.22 +- build: Avoid check gpg --version during make distcheck. (wk) +- indent: Fix indentation of an if block. (wk) +- gpg: Fix memory leak. (gniibe) +- rsa: Reduce secmem pressure. (gniibe) +- rsa: Allow different build directory. (gniibe) +- rsa: Add exponent blinding. (mb) +- mpi: Minor fix for mpi_pow. (gniibe) +- mpi: Same computation for square and multiply for mpi_pow. (gniibe) +- mpi: Simplify mpi_powm. (gniibe) +- mpi: Fix ARM assembler in longlong.h. (marcus.brinkmann) (#1424619) +- g10: Fix secmem leak. (ineiev) +- gpg: Fix exporting of zero length user ID packets. (wk) +- tools: Fix option parsing for gpg-zip. (neal) + +* Mon May 15 2017 Brian C. Lane - 1.4.21-4 ++ Build with -O1 on arm to work around gcc problems with -O2 in rhbz#1424619 + +* Fri Feb 10 2017 Fedora Release Engineering - 1.4.21-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Thu Jan 12 2017 Igor Gnatenko - 1.4.21-2 +- Rebuild for readline 7.x + +* Mon Aug 22 2016 Brian C. Lane - 1.4.21-1 +- New upstream v1.4.21 +- Fix critical security bug in the RNG [CVE-2016-6313] (#1366105) +- Tweak default options for gpgv +- By default do not anymore emit the GnuPG version with --armor + +* Wed Feb 03 2016 Fedora Release Engineering - 1.4.20-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Mon Dec 21 2015 Brian C. Lane 1.4.20-1 +- New upstream v1.4.20 (#1293112) +- Reject signatures made using the MD5 hash algorithm unless the new option --allow-weak-digest-algos or --pgp2 are given. +- New option --weak-digest to specify hash algorithms which should be considered weak. +- Changed default cipher for symmetric-only encryption to AES-128. +- Fix for DoS when importing certain garbled secret keys. +- Improved error reporting for secret subkey w/o corresponding public subkey. +- Improved error reporting in decryption due to wrong algorithm. +- Fix cluttering of stdout with trustdb info in double verbose mode. +- Pass a DBUS envvar to gpg-agent for use by gnome-keyring. + +* Wed Jun 17 2015 Fedora Release Engineering - 1.4.19-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Mon Jun 15 2015 Brian C. Lane 1.4.19-2 +- Bump release so f20 version doesn't break upgrade path (#1231428) + +* Fri Feb 27 2015 Brian C. Lane 1.4.19-1 +- New upstream v1.4.19 +- Use ciphertext blinding for Elgamal decryption [CVE-2014-3591] +- Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837] +- Drop patches now included upstream + +* Fri Oct 17 2014 Brian C. Lane 1.4.18-4 +- Add kbnode_t needed for import filter patch + +* Thu Oct 16 2014 Brian C. Lane 1.4.18-3 +- Adding patch for rhbz#1127013 / issue1680 - import filter too strict + +* Sat Aug 16 2014 Fedora Release Engineering - 1.4.18-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Mon Jun 30 2014 Brian C. Lane 1.4.18-1 +- New upstream v1.4.18 +- Fix a regression in 1.4.17 if more than one keyid is given to --recv-keys et al. +- Cap RSA and Elgamal keysize at 4096 bit also for unattended key generation. + +* Mon Jun 23 2014 Brian C. Lane 1.4.17-1 +- New upstream v1.4.17 +- Avoid DoS due to garbled compressed data packets. +- Screen keyserver reponses to avoid import of unwanted keys by rogue servers. +- Add hash algorithms to the "sig" records of the colon output. +- More specific reason codes for INV_RECP status. +- Drop gpg.ru.1 + +* Sat Jun 07 2014 Fedora Release Engineering - 1.4.16-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Thu Feb 27 2014 Brian C. Lane 1.4.16-4 +- Cleanup some autoreconf complaints + +* Sat Dec 21 2013 Ville Skyttä - 1.4.16-3 +- Drop INSTALL from docs. +- Fix bogus dates in %%changelog. + +* Wed Dec 18 2013 Peter Robinson 1.4.16-2 +- New upstream v1.4.16 + fixes for CVE-2013-4576 + +* Mon Oct 07 2013 Brian C. Lane 1.4.15-1 +- New upstream v1.4.15 + fixes for CVE-2013-4402 (#1015967) + fixes for CVE-2013-4351 (#1010140) + +* Mon Jul 29 2013 Brian C. Lane 1.4.14-1 +- New upstream v1.4.14 + fixes for CVE-2013-4242 (#988592) + includes fix for build on big-endian arches + +* Sat Jan 26 2013 Peter Robinson 1.4.13-3 +- Add -vif to autoreconf to fix build failure + +* Mon Jan 07 2013 Dan Horák 1.4.13-2 +- fix build on big-endian arches (gnupg bug #1461) + +* Wed Jan 02 2013 Brian C. Lane 1.4.13-1 +- New upstream v1.4.13 + fixes for CVE-2012-6085 (#891142) + +* Thu Jul 19 2012 Fedora Release Engineering - 1.4.12-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Mon Jan 30 2012 Brian C. Lane - 1.4.12-1 +- New upstream v1.4.12 + +* Fri Jan 13 2012 Fedora Release Engineering - 1.4.11-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Feb 08 2011 Fedora Release Engineering - 1.4.11-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Oct 20 2010 Brian C. Lane 1.4.11-2 +- Added ownership of %%dir %%{_libexecdir}/gnupg (#644576) + +* Mon Oct 18 2010 Brian C. Lane 1.4.11-1 +- New upstream v1.4.11 +- Dropped patch gnupg-1.4.6-dir.patch, now in upstream + +* Wed Jul 21 2010 Brian C. Lane 1.4.10-2 +- Reviving gnupg 1.x series for F-13, F-14 and rawhide + +* Wed Sep 2 2009 Nalin Dahyabhai 1.4.10-1 +- update to 1.4.10 + +* Fri Jul 24 2009 Fedora Release Engineering - 1.4.9-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Tue Feb 24 2009 Fedora Release Engineering - 1.4.9-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Thu Feb 19 2009 Nalin Dahyabhai +- switch from %%{_libdir}/%%{name} as libexecdir to regular old %%{_libexecdir} + (part of #225847) +- remove explicit configure arguments to use bzip2 and readline, which are + the default and trigger errors when not present, but continue to explicitly + request zlib so that we don't fall back to the internal one if something + ever looks "off" about the system copy (part of #225847) +- convert the ru manual and doc files to UTF-8 (the ones which aren't already, + rpmlint) + +* Tue Jul 22 2008 Nalin Dahyabhai - 1.4.9-4 +- describe license as actually GPLv3+ with exceptions rather than just GPLv3+ + (Todd Zullinger, #447772) +- drop unneeded patch to use gpgkeys_ldap for ldaps: URLs (#447772) + +* Tue May 27 2008 Nalin Dahyabhai - 1.4.9-3 +- note license is actually GPLv3+ rather than just GPLv3 (Todd Zullinger, + #447772) + +* Sat May 24 2008 Tom "spot" Callaway - 1.4.9-2 +- fix build failure with curl-7.18.1+ and gcc-4.3+ (#447772) + +* Mon May 19 2008 Dennis Gilmore - 1.4.9-1.1 +- rebuild for sparc + +* Wed Mar 26 2008 Nalin Dahyabhai - 1.4.9-1 +- update to 1.4.9 to fix a possible vulnerability in 1.4.8 +- add a disttag +- drop patch to let us specify a dependent library for readline, as the + readline package now links with its dependency + +* Wed Mar 26 2008 Rex Dieter - 1.4.8-5 +- drop Provides: openpgp +- versioned Provides: gpg + +* Wed Mar 26 2008 Dennis Gilmore - 1.4.8-4 +- disable asm on sparc64 + +* Mon Feb 25 2008 Nalin Dahyabhai - 1.4.8-3 +- rebuild + +* Tue Feb 19 2008 Fedora Release Engineering - 1.4.8-2 +- Autorebuild for GCC 4.3 + +* Thu Dec 20 2007 Nalin Dahyabhai - 1.4.8-1 +- update to 1.4.8, noting license change to GPLv3 + +* Tue Dec 04 2007 Rex Dieter - 1.4.7-8 +- respin for openldap + +* Thu Aug 16 2007 Nalin Dahyabhai - 1.4.7-7 +- clarify license + +* Fri Mar 9 2007 Nalin Dahyabhai - 1.4.7-6 +- require autoconf >= 2.60, noting that we need it to define $localedir, to + avoid cases where using older versions causes gnupg to not be able to find + locale data (#231595) + +* Mon Mar 5 2007 Nalin Dahyabhai - 1.4.7-3 +- update to 1.4.7, changing the default to not allow multiple plaintexts in + a single stream + +* Tue Feb 27 2007 Nalin Dahyabhai - 1.4.6-4 +- flip the switch on libtermcap/ncurses (#230187) +- rpmlint fixups + +* Wed Dec 6 2006 Nalin Dahyabhai - 1.4.6-3 +- rebuild + +* Wed Dec 6 2006 Nalin Dahyabhai - 1.4.6-2 +- rebuild + +* Wed Dec 6 2006 Nalin Dahyabhai - 1.4.6-1 +- update to 1.4.6, incorporating fixes for CVE-2006-6169 and CVE-2006-6235 + +* Tue Dec 5 2006 Nalin Dahyabhai - 1.4.5-13 +- apply the termlib patch again + +* Tue Dec 5 2006 Nalin Dahyabhai - 1.4.5-12 +- don't apply the non-security termlib patch + +* Tue Dec 5 2006 Nalin Dahyabhai - 1.4.5-11 +- rebuild + +* Tue Dec 5 2006 Nalin Dahyabhai - 1.4.5-10 +- incorporate patch from Werner to fix use of stack variable after it goes + out of scope (CVE-2006-6235, #218483) + +* Fri Dec 1 2006 Nalin Dahyabhai - 1.4.5-9 +- rebuild +- give configure a --with-termlib option which can be used to force the + selection of libtermcap or libncurses, but don't flip the switch yet + +* Fri Dec 1 2006 Nalin Dahyabhai - 1.4.5-8 +- rebuild + +* Fri Dec 1 2006 Nalin Dahyabhai - 1.4.5-7 +- rebuild + +* Fri Dec 1 2006 Nalin Dahyabhai - 1.4.5-6 +- add patch for overflow in openfile.c from Werner's mail + (CVE-2006-6169, #218506) + +* Tue Oct 31 2006 Nalin Dahyabhai - 1.4.5-5 +- rebuild against current libcurl + +* Fri Aug 18 2006 Jesse Keating - 1.4.5-4 +- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* + (#203001) + +* Tue Aug 1 2006 Nalin Dahyabhai - 1.4.5-3 +- rebuild + +* Tue Aug 1 2006 Nalin Dahyabhai - 1.4.5-2 +- rebuild +- reenable curl support + +* Tue Aug 1 2006 Nalin Dahyabhai - 1.4.5-1 +- update to 1.4.5, fixing additional size overflows in packet parsing (#200904, + CVE-2006-3746) +- temporarily disable curl support again + +* Fri Jul 28 2006 Nalin Dahyabhai - 1.4.4.90-1 +- update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90 + to avoid looking "newer" than the eventual 1.4.5 +- because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT + +* Thu Jul 20 2006 Nalin Dahyabhai - 1.4.4-7 +- add BuildPrereq on curl-devel to get curl's ipv6 support (#198375) + +* Wed Jul 12 2006 Nalin Dahyabhai - 1.4.4-6 +- fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow + detection (#198612) + +* Wed Jul 12 2006 Jesse Keating - 1.4.4-5.1 +- rebuild + +* Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-5 +- try again using per-platform buildprereq (jkeating) + +* Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-4 +- buildprereq libusb-devel, so that we get CCID support back (#197450) + +* Mon Jun 26 2006 Nalin Dahyabhai - 1.4.4-3 +- rebuild + +* Mon Jun 26 2006 Nalin Dahyabhai - 1.4.4-2 +- rebuild + +* Mon Jun 26 2006 Nalin Dahyabhai - 1.4.4-1 +- update to 1.4.4 + +* Tue Jun 20 2006 Nalin Dahyabhai - 1.4.3-5 +- rebuild + +* Tue Jun 20 2006 Nalin Dahyabhai - 1.4.3-4 +- add patch from upstream to fix CVE-2006-3082 (#195946) + +* Tue Apr 11 2006 Nalin Dahyabhai - 1.4.3-3 +- rebuild + +* Tue Apr 11 2006 Nalin Dahyabhai - 1.4.3-2 +- apply patch from David Shaw to try multiple defaults if the the photo-viewer + option isn't set (fixes #187880) + +* Fri Mar 10 2006 Nalin Dahyabhai - 1.4.3-1 +- update to 1.4.3 + +* Fri Mar 10 2006 Nalin Dahyabhai - 1.4.2.2-2 +- rebuild + +* Fri Mar 10 2006 Nalin Dahyabhai - 1.4.2.2-1 +- update to 1.4.2.2 to fix detection of unsigned data (CVE-2006-0049, #185111) + +* Mon Feb 20 2006 Nalin Dahyabhai - 1.4.2.1-4 +- rebuild + +* Mon Feb 20 2006 Nalin Dahyabhai - 1.4.2.1-3 +- add patch from David Shaw to fix error reading keyrings created with older + versions of GnuPG (Enrico Scholz, #182163) + +* Wed Feb 15 2006 Nalin Dahyabhai - 1.4.2.1-2 +- rebuild + +* Wed Feb 15 2006 Nalin Dahyabhai - 1.4.2.1-1 +- update to 1.4.2.1 (fixes CVE-2006-0455) + +* Fri Feb 10 2006 Jesse Keating - 1.4.2-3.2.1 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Jesse Keating - 1.4.2-3.2 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Fri Dec 09 2005 Jesse Keating +- rebuilt + +* Tue Aug 9 2005 Nalin Dahyabhai 1.4.2-3 +- don't override libexecdir any more; we don't need to (#165462) + +* Thu Aug 4 2005 Nalin Dahyabhai 1.4.2-2 +- pull in David Shaw's fix for key generation in batch mode + +* Fri Jul 29 2005 Nalin Dahyabhai +- change %%post to check if the info files are there before attempting to + add or remove them from the info index (#91641) + +* Wed Jul 27 2005 Nalin Dahyabhai 1.4.2-1 +- update to 1.4.2 + +* Thu May 5 2005 Nalin Dahyabhai 1.4.1-3 +- fix the execstack problem correctly this time (arjanv) + +* Thu Apr 28 2005 Nalin Dahyabhai 1.4.1-2 +- add -Wa,--noexecstack back to CFLAGS when invoking configure, the + --enable-noexecstack flag only seems to affect asm modules + +* Wed Mar 16 2005 Nalin Dahyabhai 1.4.1-1 +- update to 1.4.1 + +* Tue Mar 8 2005 Nalin Dahyabhai 1.4.0-2 +- build asm modules with -Wa,--noexecstack + +* Mon Jan 24 2005 Nalin Dahyabhai 1.4.0-1 +- comment out libusb-devel req for now so that we can build +- build the mpi asm modules with gcc, not a cpp/as setup so that we don't end + up with text relocations in the resulting binaries (#145836) + +* Wed Dec 22 2004 Nalin Dahyabhai +- update to 1.4.0 + +* Mon Nov 1 2004 Nalin Dahyabhai +- add a pile of buildprereq + +* Mon Nov 1 2004 Robert Scheck 1.2.6-2 +- set LANG=C before running shm coprocessing build-time check (#129873) + +* Thu Aug 26 2004 Nalin Dahyabhai 1.2.6-1 +- update to 1.2.6 + +* Tue Jul 27 2004 Nalin Dahyabhai +- update to 1.2.5 +- reenable optimization on ppc64 + +* Tue Jun 15 2004 Elliot Lee +- rebuilt + +* Tue Mar 02 2004 Elliot Lee +- rebuilt + +* Fri Feb 13 2004 Elliot Lee +- rebuilt + +* Fri Feb 6 2004 Nalin Dahyabhai 1.2.4-1 +- update to 1.2.4, dropping separate ElGamal disabling patch + +* Fri Dec 12 2003 Nalin Dahyabhai 1.2.3-3 +- rebuild + +* Mon Dec 1 2003 Nalin Dahyabhai 1.2.3-2 +- incorporate patch from gnupg-announce which removes the ability to create + ElGamal encrypt+sign keys or to sign messages with such keys + +* Mon Oct 27 2003 Nalin Dahyabhai 1.2.3-1 +- use -fPIE instead of -fpie because some arches need it + +* Mon Oct 27 2003 Nalin Dahyabhai +- build gnupg as a position-independent executable (Arjan van de Ven) + +* Mon Aug 25 2003 Nalin Dahyabhai +- add Werner's key as a source file + +* Fri Aug 22 2003 Nalin Dahyabhai +- update to 1.2.3 + +* Thu Jun 19 2003 Nalin Dahyabhai 1.2.2-3 +- disable asm and optimization on ppc64 + +* Fri Jun 13 2003 Nalin Dahyabhai +- add a build-time check to ensure that shm coprocessing was enabled + +* Wed Jun 04 2003 Elliot Lee +- rebuilt + +* Mon May 5 2003 Nalin Dahyabhai 1.2.2-1 +- update to 1.2.2, fixing CAN-2003-0255 + +* Thu May 1 2003 Elliot Lee 1.2.1-5 +- Add ppc64 patch to fix up global symbol names in assembly + +* Fri Feb 28 2003 Kevin Sonney 1.2.1-4 +- remove autoconf call on sparc + +* Fri Feb 7 2003 Nalin Dahyabhai 1.2.1-3 +- modify g10defs to look for helpers in libexecdir, because that's where they + get installed, per gnupg-users +- actually drop updates for 1.0.7 which are no longer needed for 1.2.1 + +* Wed Jan 22 2003 Tim Powers +- rebuilt + +* Mon Oct 28 2002 Nalin Dahyabhai 1.2.1-1 +- update to 1.2.1 + +* Tue Sep 24 2002 Nalin Dahyabhai 1.2.0-1 +- update to 1.2.0 +- stop stripping files manually, let the buildroot policies handle it +- add translations updates ca and fr + +* Tue Aug 27 2002 Nalin Dahyabhai 1.0.7-6 +- rebuild + +* Wed Jul 24 2002 Nalin Dahyabhai 1.0.7-5 +- specify a menu entry when installing info pages + +* Wed Jul 24 2002 Nalin Dahyabhai 1.0.7-4 +- add and install info pages (#67931) +- don't include two copies of the faq, add new doc files (#67931) + +* Fri Jun 21 2002 Tim Powers +- automated rebuild + +* Sun May 26 2002 Tim Powers +- automated rebuild + +* Tue Apr 30 2002 Nalin Dahyabhai 1.0.7-1 +- update to 1.0.7 + +* Fri Feb 22 2002 Nalin Dahyabhai 1.0.6-5 +- rebuild + +* Wed Jan 23 2002 Nalin Dahyabhai 1.0.6-4 +- make the codeset patch unconditional + +* Thu Aug 9 2001 Nalin Dahyabhai 1.0.6-3 +- set message output encoding to match the message encoding, based on a + patch by goeran@uddeborg.pp.se (#49182) + +* Sun Jun 24 2001 Elliot Lee 1.0.6-2 +- Bump release + rebuild. + +* Wed May 30 2001 Nalin Dahyabhai 1.0.6-1 +- update to 1.0.6, fixes format string exploit + +* Mon Apr 30 2001 Nalin Dahyabhai +- update to 1.0.5, dropping various patches + +* Tue Feb 27 2001 Trond Eivind Glomsrød +- langify +- strip binaries in /usr/lib/gnupg + +* Tue Feb 27 2001 Nalin Dahyabhai +- fix the group + +* Mon Dec 18 2000 Nalin Dahyabhai +- go with this version -- 1.0.4c includes a lot of changes beyond just the + two security fixes + +* Thu Dec 14 2000 Nalin Dahyabhai +- add the --allow-secret-key-import patch from CVS in case we don't get a 1.0.5 + +* Fri Dec 8 2000 Nalin Dahyabhai +- build as an errata for 7 + +* Fri Dec 1 2000 Nalin Dahyabhai +- add a security patch for a problem with detached signature verification... + might hold off for an impending 1.0.5, though + +* Thu Oct 19 2000 Nalin Dahyabhai +- fix a bug preventing creation of .gnupg directories + +* Wed Oct 18 2000 Nalin Dahyabhai +- add patch to recognize AES signatures properly (#19312) +- add gpgv to the package + +* Tue Oct 17 2000 Nalin Dahyabhai +- update to 1.0.4 to get security fix + +* Tue Oct 10 2000 Nalin Dahyabhai +- fix man page typos (#18797) + +* Thu Sep 21 2000 Nalin Dahyabhai +- update to 1.0.3 +- switch to bundled copy of the man page + +* Wed Aug 30 2000 Matt Wilson +- rebuild to cope with glibc locale binary incompatibility, again + +* Wed Aug 16 2000 Nalin Dahyabhai +- revert locale patch (#16222) + +* Tue Aug 15 2000 Nalin Dahyabhai +- set all locale data instead of LC_MESSAGES and LC_TIME (#16222) + +* Sun Jul 23 2000 Nalin Dahyabhai +- update to 1.0.2 + +* Wed Jul 19 2000 Jakub Jelinek +- rebuild to cope with glibc locale binary incompatibility + +* Thu Jul 13 2000 Prospector +- automatic rebuild + +* Wed Jul 12 2000 Nalin Dahyabhai +- include lspgpot (#13772) + +* Mon Jun 5 2000 Nalin Dahyabhai +- rebuild in new build environment + +* Fri Feb 18 2000 Bill Nottingham +- build of 1.0.1 + +* Fri Sep 10 1999 Cristian Gafton +- version 1.0.0 build for 6.1us