[ubuntu/yakkety-proposed] gnupg 1.4.20-6ubuntu1 (Accepted)

[Marc Deslauriers]

gnupg (1.4.20-6ubuntu1) yakkety; urgency=medium

  * Merge with Debian. Remaining Ubuntu changes:
    - Disable mlock() test since it fails with ulimit 0 (on buildds).
    - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
    - Only suggest gnupg-curl and libldap; recommendations are pulled into
      minimal, and we don't need the keyserver utilities in a minimal Ubuntu
      system.
    - Disable inline assembler for ppc64el.
    - Enable SHA-512 support in gpgv-udeb.
    - debian/patches/lp1541925.patch: Make sure directory exists before
      creating the lock.
  * SECURITY UPDATE: random number generator prediction
    - debian/patches/CVE-2016-6313-1.patch: improve readability by using a
      macro in cipher/random.c.
    - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
      csprng pool in cipher/random.c.
    - CVE-2016-6313

gnupg (1.4.20-6) unstable; urgency=medium

  * drop gpgv-win32, now handled by gnupg2 source package
  * fix armel gpgv1.4-udeb for cross-building (Closes: #820776)

gnupg (1.4.20-5) unstable; urgency=medium

  * use autoreconf
  * avoid building the udeb for platforms that don't need it
  * bump Standards-Version to 3.9.7 (no changes needed)

gnupg (1.4.20-4) unstable; urgency=medium

  [ Martin Michlmayr ]
  * add a gpgv1.4-udeb package for armel (Closes: #814027)

gnupg (1.4.20-3) unstable; urgency=medium

  * drop Thijs from uploaders at his request.  Thanks for all the work!

gnupg (1.4.20-2) unstable; urgency=medium

  * drop gpgv-udeb package -- it should now be built by gnupg2.
  * drop gnupg-dbg package since we now have auto-generated -dbgsym packages

Date: Fri, 19 Aug 2016 07:40:34 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnupg/1.4.20-6ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Aug 2016 07:40:34 -0400
Source: gnupg
Binary: gnupg gnupg-curl gpgv gpgv1.4-udeb
Architecture: source
Version: 1.4.20-6ubuntu1
Distribution: yakkety
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 gnupg      - GNU privacy guard - a free PGP replacement
 gnupg-curl - GNU privacy guard - a free PGP replacement (cURL)
 gpgv       - GNU privacy guard - signature verification tool
 gpgv1.4-udeb - minimal signature verification tool (udeb)
Closes: 814027 820776
Changes:
 gnupg (1.4.20-6ubuntu1) yakkety; urgency=medium
 .
   * Merge with Debian. Remaining Ubuntu changes:
     - Disable mlock() test since it fails with ulimit 0 (on buildds).
     - Set gpg (or gpg2) and gpgsm to use a passphrase agent by default.
     - Only suggest gnupg-curl and libldap; recommendations are pulled into
       minimal, and we don't need the keyserver utilities in a minimal Ubuntu
       system.
     - Disable inline assembler for ppc64el.
     - Enable SHA-512 support in gpgv-udeb.
     - debian/patches/lp1541925.patch: Make sure directory exists before
       creating the lock.
   * SECURITY UPDATE: random number generator prediction
     - debian/patches/CVE-2016-6313-1.patch: improve readability by using a
       macro in cipher/random.c.
     - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
       csprng pool in cipher/random.c.
     - CVE-2016-6313
 .
 gnupg (1.4.20-6) unstable; urgency=medium
 .
   * drop gpgv-win32, now handled by gnupg2 source package
   * fix armel gpgv1.4-udeb for cross-building (Closes: #820776)
 .
 gnupg (1.4.20-5) unstable; urgency=medium
 .
   * use autoreconf
   * avoid building the udeb for platforms that don't need it
   * bump Standards-Version to 3.9.7 (no changes needed)
 .
 gnupg (1.4.20-4) unstable; urgency=medium
 .
   [ Martin Michlmayr ]
   * add a gpgv1.4-udeb package for armel (Closes: #814027)
 .
 gnupg (1.4.20-3) unstable; urgency=medium
 .
   * drop Thijs from uploaders at his request.  Thanks for all the work!
 .
 gnupg (1.4.20-2) unstable; urgency=medium
 .
   * drop gpgv-udeb package -- it should now be built by gnupg2.
   * drop gnupg-dbg package since we now have auto-generated -dbgsym packages
Checksums-Sha1:
 0b040c9702226cd26e5a35e646983c572613be95 2354 gnupg_1.4.20-6ubuntu1.dsc
 359e464bcabbe370696e3dba45a1d63968c06ab3 5156447 gnupg_1.4.20.orig.tar.gz
 f71a25dab8098772cc8036a7d21b810b19c38b75 38496 gnupg_1.4.20-6ubuntu1.debian.tar.xz
Checksums-Sha256:
 43919a63696dbb3c6a17930d0598e8901d19a1f1e4c4715adbf6113f26a7f925 2354 gnupg_1.4.20-6ubuntu1.dsc
 dc1f1a6028488303a4efb01aadda480b9cd0f49f65aef94c432628fdd127e586 5156447 gnupg_1.4.20.orig.tar.gz
 8732eea984b6efedced7f0dc2175276fbd2d4b847065f453a36521277e217761 38496 gnupg_1.4.20-6ubuntu1.debian.tar.xz
Files:
 1a398ba7ae937710d8962aaf24f1c546 2354 utils important gnupg_1.4.20-6ubuntu1.dsc
 25848be812a99fc009a79a9b91851f7c 5156447 utils important gnupg_1.4.20.orig.tar.gz
 3478d6560ae9284612be4253c5ecf694 38496 utils important gnupg_1.4.20-6ubuntu1.debian.tar.xz
Original-Maintainer: Debian GnuPG-Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=66+n
-----END PGP SIGNATURE-----