Ubuntu
gnupg package

gnupg 1.4.15-1.1ubuntu1 source package in Ubuntu

Changelog

gnupg (1.4.15-1.1ubuntu1) trusty; urgency=low

  * Resynchronise with Debian.  Remaining changes:
    - Disable mlock() test since it fails with ulimit 0 (on buildds).
    - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
    - Only suggest gnupg-curl and libldap; recommendations are pulled into
      minimal, and we don't need the keyserver utilities in a minimal Ubuntu
      system.
    - Remove the Win32 build.
  * Dropped upstreamed patches:
    - debian/patches/CVE-2013-4351.patch
    - debian/patches/CVE-2013-4402.patch

gnupg (1.4.15-1.1) unstable; urgency=high

  * Non-maintainer upload, by request of Thijs Kinkhorst.
  * Add patch revert_trustdb_changes:
   - Revert upstream GIT a1a59e6a539e597996976d0afb6aa3062e954188
     which breaks popularity-contest (closes: #725889).

gnupg (1.4.15-1) unstable; urgency=high

  * New upstream release (closes: #725718).
    - Fixed possible denial of service in the compressed packet
      parser (CVE-2013-4402, closes: #725439).
    - Documents limitations of the verify command (closes: #704645).
 -- Marc Deslauriers <email address hidden>   Wed, 30 Oct 2013 15:30:58 -0700

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
gnupg_1.4.15.orig.tar.gz 4.8 MiB 0b91e293e8566e5b841f280329b1e6fd773f7d3826844c69bec676124e0a0bb3
gnupg_1.4.15-1.1ubuntu1.debian.tar.gz 32.2 KiB 9a60287e433b43e830d5a8c71193b6191e452d55b82d9ec1486699fdcf75f930
gnupg_1.4.15-1.1ubuntu1.dsc 2.3 KiB 5ff40a6a5de62b43d62bcb6c2119dda1c056c3bd131137cc15594bca2d5db1da

View changes file

Binary packages built by this source

gnupg: GNU privacy guard - a free PGP replacement

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC 4880.
 .
 GnuPG 1.4 is the standalone, non-modularized series. In contrast to
 the version 2 series, shipped with the gnupg2 package, it comes
 with no support for S/MIME and some other tools useful for desktop
 environments, but also with less dependencies.
 .
 The gnupg package is built without libcurl. So it does not support
 HKPS keyservers. Install the gnupg-curl package if you want to use
 the keyserver helper tools built with libcurl and supporting HKPS.

gnupg-curl: GNU privacy guard - a free PGP replacement (cURL)

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC 4880.
 .
 This package contains the keyserver helper tools built with libcurl,
 which replace the ones in the gnupg package built with the "curl shim"
 variant of gnupg. This package provides support for HKPS keyservers.

gnupg-udeb: GNU privacy guard - a free PGP replacement

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC 4880.
 .
 This is GnuPG packaged in minimal form for use in debian-installer.

gpgv: GNU privacy guard - signature verification tool

 GnuPG is GNU's tool for secure communication and data storage.
 .
 gpgv is a stripped-down version of gnupg which is only able to check
 signatures. It is smaller than the full-blown gnupg and uses a
 different (and simpler) way to check that the public keys used to
 make the signature are trustworthy.

gpgv-udeb: minimal signature verification tool

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC 4880.
 .
 This is GnuPG's signature verification tool, gpgv, packaged in minimal
 form for use in debian-installer.