Subject: CVS commit: pkgsrc/security/gnupg
To: None <pkgsrc-changes@NetBSD.org>
From: Thomas Klausner <wiz@netbsd.org>
List: pkgsrc-changes
Date: 07/03/2006 21:15:14
Module Name: pkgsrc
Committed By: wiz
Date: Mon Jul 3 21:15:14 UTC 2006
Modified Files:
pkgsrc/security/gnupg: Makefile distinfo
Removed Files:
pkgsrc/security/gnupg/patches: patch-ba
Log Message:
Update to 1.4.4:
Noteworthy changes in version 1.4.4 (2006-06-25)
------------------------------------------------
* User IDs are now capped at 2048 byte. This avoids a memory
allocation attack (see CVE-2006-3082).
[was already fixed in pkgsrc]
* Added support for the SHA-224 hash. Like the SHA-384 hash, it
is mainly useful when DSS (the US Digital Signature Standard)
compatibility is desired.
* Added support for the latest update to DSA keys and signatures.
This allows for larger keys than 1024 bits and hashes other than
SHA-1 and RIPEMD/160. Note that not all OpenPGP implementations
can handle these new keys and signatures yet. See
"--enable-dsa2" in the manual for more information.
To generate a diff of this commit:
cvs rdiff -r1.86 -r1.87 pkgsrc/security/gnupg/Makefile
cvs rdiff -r1.40 -r1.41 pkgsrc/security/gnupg/distinfo
cvs rdiff -r1.1 -r0 pkgsrc/security/gnupg/patches/patch-ba
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.