Update to 1.4.16: Noteworthy changes in version 1.4.16 (2013-12-18) ------------------------------------------------- * Fixed the RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack as described by Genkin, Shamir, and Tromer. See <http://www.cs.tau.ac.il/~tromer/acoustic/>. [CVE-2013-4576] * Put only the major version number by default into armored output. * Do not create a trustdb file if --trust-model=always is used. * Print the keyid for key packets with --list-packets. * Changed modular exponentiation algorithm to recover from a small performance loss due to a change in 1.4.14.diff -r1.122 -r1.123 pkgsrc/security/gnupg/Makefile
(wiz)
@@ -1,16 +1,16 @@ | @@ -1,16 +1,16 @@ | |||
1 | # $NetBSD: Makefile,v 1.122 2013/10/26 23:30:29 wiz Exp $ | 1 | # $NetBSD: Makefile,v 1.123 2013/12/18 18:56:24 wiz Exp $ | |
2 | 2 | |||
3 | DISTNAME= gnupg-1.4.15 | 3 | DISTNAME= gnupg-1.4.16 | |
4 | CATEGORIES= security | 4 | CATEGORIES= security | |
5 | MASTER_SITES= ftp://ftp.gnupg.org/gcrypt/gnupg/ \ | 5 | MASTER_SITES= ftp://ftp.gnupg.org/gcrypt/gnupg/ \ | |
6 | http://gd.tuwien.ac.at/privacy/gnupg/gnupg/ \ | 6 | http://gd.tuwien.ac.at/privacy/gnupg/gnupg/ \ | |
7 | ftp://ftp.jyu.fi/pub/crypt/gcrypt/gnupg/ \ | 7 | ftp://ftp.jyu.fi/pub/crypt/gcrypt/gnupg/ \ | |
8 | ftp://ftp.ring.gr.jp/pub/net/gnupg/gnupg/ | 8 | ftp://ftp.ring.gr.jp/pub/net/gnupg/gnupg/ | |
9 | EXTRACT_SUFX= .tar.bz2 | 9 | EXTRACT_SUFX= .tar.bz2 | |
10 | 10 | |||
11 | MAINTAINER= wiz@NetBSD.org | 11 | MAINTAINER= wiz@NetBSD.org | |
12 | HOMEPAGE= http://www.gnupg.org/ | 12 | HOMEPAGE= http://www.gnupg.org/ | |
13 | COMMENT= GNU Privacy Guard, public-Key encryption and digital signatures | 13 | COMMENT= GNU Privacy Guard, public-Key encryption and digital signatures | |
14 | LICENSE= gnu-gpl-v3 | 14 | LICENSE= gnu-gpl-v3 | |
15 | 15 | |||
16 | PKG_INSTALLATION_TYPES= overwrite pkgviews | 16 | PKG_INSTALLATION_TYPES= overwrite pkgviews |
@@ -1,6 +1,6 @@ | @@ -1,6 +1,6 @@ | |||
1 | $NetBSD: distinfo,v 1.62 2013/10/05 13:19:51 wiz Exp $ | 1 | $NetBSD: distinfo,v 1.63 2013/12/18 18:56:24 wiz Exp $ | |
2 | 2 | |||
3 | SHA1 (gnupg-1.4.15.tar.bz2) = 63ebf0ab375150903c65738070e4105200197fd4 | 3 | SHA1 (gnupg-1.4.16.tar.bz2) = 0bf5e475f3eb6f33d5474d017fe5bf66070e43f4 | |
4 | RMD160 (gnupg-1.4.15.tar.bz2) = d655bd65f644d2649eebddf7cd578259a04310de | 4 | RMD160 (gnupg-1.4.16.tar.bz2) = 21eb6018d3c33c93f5729d98dc4d7a2699801bc5 | |
5 | Size (gnupg-1.4.15.tar.bz2) = 3654415 bytes | 5 | Size (gnupg-1.4.16.tar.bz2) = 3656752 bytes | |
6 | SHA1 (patch-ab) = 24e200a04f8f31e53e22dc80ed079570cb5de8d8 | 6 | SHA1 (patch-ab) = 24e200a04f8f31e53e22dc80ed079570cb5de8d8 |