rpm/gpg2
SHA256
1
0
Fork 0
forked from pool/gpg2
Code Pull Requests Activity

Accepting request 238555 from home:AndreasStieger:branches:Base:System

Browse Source 
GnuPG 2.0.24 [bnc#884130] [CVE-2014-4617]

OBS-URL: https://build.opensuse.org/request/show/238555
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=73
This commit is contained in:
Stephan Kulow 2014-06-25 05:12:17 +00:00 committed by Git OBS Bridge
parent bc78af366e
commit b5050335d4
7 changed files with 23 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
gnupg-2.0.23.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:cf196b8056eafb4236f000a3e12543e0022a1fec4d6edff1b91b48936c109841
size 4297195

BIN
gnupg-2.0.23.tar.bz2.sig
View File

Binary file not shown.

3
gnupg-2.0.24.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d974a1d86c9470571411346368416d96200ef9510028763c1303cd66e3820232
size 4301922

BIN
gnupg-2.0.24.tar.bz2.sig Normal file
View File

Binary file not shown.

18
gpg2.changes
View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Tue Jun 24 22:25:12 UTC 2014 - andreas.stieger@gmx.de
- update to 2.0.24
Contains a security fix to stop a possible DoS using garbled
compressed data packets which can be used to put gpg into an
infinite loop. [bnc#884130] [CVE-2014-4617]
* gpg: Avoid DoS due to garbled compressed data packets.
- further:
* gpg: Screen keyserver responses to avoid importing unwanted
keys from rogue servers.
* gpg: The validity of user ids is now shown by default. To
revert this add "list-options no-show-uid-validity" to gpg.conf
* gpg: Print more specific reason codes with the INV_RECP status.
* gpg: Allow loading of a cert only key to an OpenPGP card.
* gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
1.6.
-------------------------------------------------------------------
Tue Jun 3 21:55:34 UTC 2014 - andreas.stieger@gmx.de

2
gpg2.keyring
View File

@ -7,7 +7,7 @@
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<meta name="title" content="GnuPG - Signature Key"/>
<meta name="generator" content="Org-mode"/>
<meta name="generated" content="򳢛"/>
<meta name="generated" content="򳢰"/>
<meta name="author" content="Werner Koch"/>
<meta name="description" content=""/>
<meta name="keywords" content=""/>

2
gpg2.spec
View File

@ -17,7 +17,7 @@
Name: gpg2
Version: 2.0.23
Version: 2.0.24
Release: 0
BuildRequires: automake >= 1.10
BuildRequires: expect