From 5d5e6f61deefbd490b06756c76dec739fd3cbed0 Mon Sep 17 00:00:00 2001
From: Brian C. Lane <bcl@redhat.com>
Date: Dec 21 2015 17:46:39 +0000
Subject: - New upstream v1.4.20 (#1293112)

- Reject signatures made using the MD5 hash algorithm unless the new option --allow-weak-digest-algos or --pgp2 are given.
- New option --weak-digest to specify hash algorithms which should be considered weak.
- Changed default cipher for symmetric-only encryption to AES-128.
- Fix for DoS when importing certain garbled secret keys.
- Improved error reporting for secret subkey w/o corresponding public subkey.
- Improved error reporting in decryption due to wrong algorithm.
- Fix cluttering of stdout with trustdb info in double verbose mode.
- Pass a DBUS envvar to gpg-agent for use by gnome-keyring.

---

diff --git a/gnupg.spec b/gnupg.spec
index eeff9c5..797eb22 100644
--- a/gnupg.spec
+++ b/gnupg.spec
@@ -1,7 +1,7 @@
 Summary: A GNU utility for secure communication and data storage
 Name: gnupg
-Version: 1.4.19
-Release: 2%{?dist}
+Version: 1.4.20
+Release: 1%{?dist}
 License: GPLv3+ with exceptions
 Group: Applications/System
 Source0: ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-%{version}.tar.bz2
@@ -118,6 +118,17 @@ exit 0
 %{_mandir}/man1/gpgv.1.gz
 
 %changelog
+* Mon Dec 21 2015 Brian C. Lane <bcl@redhat.com> 1.4.20-1
+- New upstream v1.4.20 (#1293112)
+- Reject signatures made using the MD5 hash algorithm unless the new option --allow-weak-digest-algos or --pgp2 are given.
+- New option --weak-digest to specify hash algorithms which should be considered weak.
+- Changed default cipher for symmetric-only encryption to AES-128.
+- Fix for DoS when importing certain garbled secret keys.
+- Improved error reporting for secret subkey w/o corresponding public subkey.
+- Improved error reporting in decryption due to wrong algorithm.
+- Fix cluttering of stdout with trustdb info in double verbose mode.
+- Pass a DBUS envvar to gpg-agent for use by gnome-keyring.
+
 * Mon Jun 15 2015 Brian C. Lane <bcl@redhat.com> 1.4.19-1
 - Bump release so f20 version doesn't break upgrade path (#1231428)
 
diff --git a/sources b/sources
index d81c9ce..2d8fe93 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-3af4ab5b3113b3e28d3551ecf9600785  gnupg-1.4.19.tar.bz2
-c8308c850697b247989aadd57637ef7c  gnupg-1.4.19.tar.bz2.sig
+b7af897a041c03c8ad1c7c466b54d10d  gnupg-1.4.20.tar.bz2
+289d60899ada86e0a341860d7824aed2  gnupg-1.4.20.tar.bz2.sig