CVS commit: pkgsrc/security/gnupg

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Feb 28 00:13:25 UTC 2015

Modified Files:
        pkgsrc/security/gnupg: Makefile PLIST distinfo

Log Message:
Update to 1.4.19:

Noteworthy changes in version 1.4.19 (2015-02-27)
-------------------------------------------------

 * Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
   See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.

 * Fixed data-dependent timing variations in modular exponentiation
   [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
   are Practical].

 * Detect faulty use of --verify on detached signatures.

 * Changed the PKA method to use CERT records and hashed names.

 * New import option "keep-ownertrust".

 * Support algorithm names when generating keys using the --command-fd
   method.

 * Updated many translations.

 * Updated build system.

 * Fixed a regression in keyserver import

 * Fixed argument parsing for option --debug-level.

 * Fixed DoS based on bogus and overlong key packets.

 * Fixed bugs related to bogus keyrings.

 * The usual minor minor bug fixes.


To generate a diff of this commit:
cvs rdiff -u -r1.127 -r1.128 pkgsrc/security/gnupg/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/security/gnupg/PLIST
cvs rdiff -u -r1.65 -r1.66 pkgsrc/security/gnupg/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.