From 8ef7cd338adf83faa0e9a1356baec22d99c55e93 Mon Sep 17 00:00:00 2001 From: Brian C. Lane Date: Jun 23 2014 23:37:15 +0000 Subject: - New upstream v1.4.17 - Avoid DoS due to garbled compressed data packets. - Screen keyserver reponses to avoid import of unwanted keys by rogue servers. - Add hash algorithms to the "sig" records of the colon output. - More specific reason codes for INV_RECP status. - Drop gpg.ru.1 --- diff --git a/gnupg.spec b/gnupg.spec index 20fabb5..9c4ee58 100644 --- a/gnupg.spec +++ b/gnupg.spec @@ -1,7 +1,7 @@ Summary: A GNU utility for secure communication and data storage Name: gnupg -Version: 1.4.16 -Release: 5%{?dist} +Version: 1.4.17 +Release: 1%{?dist} License: GPLv3+ with exceptions Group: Applications/System Source0: ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-%{version}.tar.bz2 @@ -41,8 +41,6 @@ git add . git commit -a -q -m "%{version} baseline." git am %{patches} # Convert these files to UTF-8, per rpmlint. -iconv -f koi8-ru -t utf-8 doc/gpg.ru.1 > doc/gpg.ru.utf8.1 -mv doc/gpg.ru.utf8.1 doc/gpg.ru.1 iconv -f iso-8859-15 -t utf-8 THANKS > THANKS.utf8 mv THANKS.utf8 THANKS git commit -a -m "run iconv" @@ -116,11 +114,18 @@ exit 0 %{_infodir}/gnupg1.info.gz %{_mandir}/man1/gpg-zip.1.gz %{_mandir}/man1/gpg.1.gz -%{_mandir}/man1/gpg.ru.1.gz %{_mandir}/man1/gpgv.1.gz %{_mandir}/man7/gnupg.7.gz %changelog +* Mon Jun 23 2014 Brian C. Lane 1.4.17-1 +- New upstream v1.4.17 +- Avoid DoS due to garbled compressed data packets. +- Screen keyserver reponses to avoid import of unwanted keys by rogue servers. +- Add hash algorithms to the "sig" records of the colon output. +- More specific reason codes for INV_RECP status. +- Drop gpg.ru.1 + * Sat Jun 07 2014 Fedora Release Engineering - 1.4.16-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild diff --git a/sources b/sources index 6886454..ee40cd4 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -6df73c57d3ece1dd36dc2a7679f00fb0 gnupg-1.4.16.tar.bz2 -ccfaa368128ad7c862741fd7bc330187 gnupg-1.4.16.tar.bz2.sig +4a646a35a3a36331baccb75e6c5ea2f6 gnupg-1.4.17.tar.bz2 +02d98c9770e5d99ec0f280fbc47cb527 gnupg-1.4.17.tar.bz2.sig