5936ddae26
- remove cve-2019-11627.patchm included in tarball. - update to version 2.10-1: * gpg-key2ps: Security fix for CVE-2018-15599: unsafe shell call enabling shell injection via a User ID. Use Perl's (core) module Encode.pm instead of shelling out to iconv. (Closes: #928256.)
Sebastian Wagner2019-06-09 19:41:01 +00:00
d504fa3d92
- update to version 2.9: * gpglist: + When --signer's argument is a long keyid or fingerprint, don't require the key to be present in the keyring. This enable filtering on unknown signing keys. + Don't choke on direct-key signatures. (Closes: #921331.) * gpgparticipants: + Improve quoting and replace echo with printf. + Avoid including subkey fingerprints when gpg.conf contains 'fingerprint'. - update to version 2.8: * keyart, gpgparticipants-prefill: port to python3. * keyart: + Don't print ASCII art for subkeys, only the master key. + Pass --no-auto-check-trustdb flag to gpg(1). + Fix crash with non-ASCII UIDs. Patch from Grégoire Detrez. * Fix a couple of spelling errors. Thanks to Edward Betts for the report and patch. (Closes: debian#882729) * caff: + Add the "only-sign-text-ids" to the list of gpg(1) options imported from ~/.gnupg/gpg.conf. + Ensure the terminal is "sane enough" when asking questions ('echo', 'echok', 'icanon', 'icrnl' settings are all set), and restore original settings when exit()'ing the program. (Closes: #872529) * caff, gpglist, gpgsigs: in gpg --with-colons output, allow signature class to be followed with an optional revocation reason. gpg(1) does that since 2.2.9. (Closes: #905097.) * caff, gpg-key2latex, gpg-key2ps, gpglist, gpgsigs, keylookup: Remove references to https://pgp-tools.alioth.debian.org/ . * caff, gpg-key2latex, gpg-key2ps, gpg-mailkeys, gpglist, gpgparticipants, gpgsigs, keylookup: Remove SVN keywords ($Id$, $Rev$, etc.)
Sebastian Wagner2019-03-17 20:08:39 +00:00
13a8923874
- fix an incompatibility with perl 5.18 (boo#955986) * caff 2.x is using hash slices which were introduced in Perl 5.20 * added caff-perl_5.18_compatibility.patch
Andreas Stieger2015-11-27 08:20:11 +00:00