Changelog for gpg-1.2.4-65.i586.rpm :
Tue Aug 24 12:00:00 2004 - gbvAATToxixares.com
- Backported to SuSE 8.2 from SuSE 9.1

Thu Mar 25 11:00:00 2004 - mmjAATTsuse.de
- Add postfix to # neededforbuild

Mon Mar 22 11:00:00 2004 - garloffAATTsuse.de
- Move allocation of locked memory up and make gpg setuid root
(#33570).

Wed Feb 4 11:00:00 2004 - garloffAATTsuse.de
- Drop pgpgpg.
- Add #norootforbuild and fix package accordingly.

Wed Feb 4 11:00:00 2004 - garloffAATTsuse.de
- Update to GnuPG-1.2.4:

* Experimental read-only support for bzip2 compression.

* Handle msgs that are decryptable by a passphrase or secret key.

* Drop most Elgamal sign+encrypt support: No signatures can be
generated any more, nor keys be generated. Decryption still
works as does generation of revoc certificates. However, Elgamal
sign+encrypt is scheduled for complete removal.

* Add russian and belarussian translations.

Tue Dec 2 11:00:00 2003 - garloffAATTsuse.de
- Update to GnuPG-1.2.3:

* --gnupg option disabling --openpgp and various --pgpX emulation
options.

* new %g (sig key fingerprint) and %p (prim key of sig
fingerprint) expands for policy URLs.

* new tru(st) record in --list-keys --with-colons.

* REVKEYSIG status for --status-fd indicating a valid sig with
a revoked key.

* Romanian translations.
- Drop setlocale patch.
- Update README.SuSE.

Thu Nov 27 11:00:00 2003 - garloffAATTsuse.de
- Fix format string bug in HKP keyserver module.
- Disable possibility to create ElGamal type 20 (sign+encrypt) keys
as they are vulnerable to attacks. [#33369]

Sat Jul 19 12:00:00 2003 - garloffAATTsuse.de
- Make -passphrase-fd override use-agent option [#27843]
- use : in chown rather than . to separate gid from uid.

Thu Jun 12 12:00:00 2003 - garloffAATTsuse.de
- Package %dir /usr/lib(64)/gnupg
- Fix syntax in test [] expressions in check scripts

Wed Jun 4 12:00:00 2003 - roAATTsuse.de
- fix install_info --delete call and move from preun to postun

Wed Jun 4 12:00:00 2003 - garloffAATTsuse.de
- Update to GnuPG-1.2.2:

* Fix for bug #27242: The trust path did not check for the given
user-ID but the most trusted one belonging to the same keyID,
and consequently failed to display a warning when encrypting
to (or verifying a signature from) an untrusted UID.

* revuid command in edit-key menu

* Compatibility with CryptoEx improved.

* read-only support for SHA-256 hash

* TIGER192 digest algo disabled (about to be dropped from
OpenPGP std)

* --enable-progress-filter for frontends

Wed Feb 26 11:00:00 2003 - garloffAATTsuse.de
- Report version number 1.2.2-rc1-SuSE
- Change defaults to have use-agent enabled
- photo-viewer settings: default to kfmclient openURL

Wed Feb 19 11:00:00 2003 - garloffAATTsuse.de
- Disable %install_info for older distros.
- Install convert-from-106 into /usr/bin/gpg-convert-from-106

Tue Feb 18 11:00:00 2003 - garloffAATTsuse.de
- Update to 1.2.2rc1:

* convert-from-106 script to help trustdb conversion

* notation names should have AATT (need --expert to override)

* --trust-model always for forward(!) compatibility

* Prevent compiler from optimizing away memory wiping code

* Skip disabled keys in selection for encryption

* Minor trustdb tweaks

* New translations: Finnish, Trad. Chinese
- Enable external hkp interface (for gpgme/3rd party software)

Thu Feb 6 11:00:00 2003 - roAATTsuse.de
- use macros for install-info

Thu Oct 31 11:00:00 2002 - roAATTsuse.de
- re-enable autoreqprov: all required libs are part of the
minimal system

Wed Oct 30 11:00:00 2002 - garloffAATTsuse.de
- Avoid dependencies triggered by LDAP module.

Wed Oct 30 11:00:00 2002 - garloffAATTsuse.de
- Update README.SuSE
- Update to GnuPG-1.2.1:

* mark secret keys generated by --export-secret-keys with # (key
listing) resp. no capabilites (colon listing)

* option --trusted-key is not obsolete any more

* bugfixes, e.g. a recursion when reading keys for trust check
- Compile with support for LDAP (openldap2) keyservers.

Fri Oct 4 12:00:00 2002 - garloffAATTsuse.de
- Move libexec to _libdir instead of share, because the plugins
will also be there.

Fri Sep 27 12:00:00 2002 - garloffAATTsuse.de
- Use install-info in %post and %preun (and add acc. PreReq)
- Move /usr/libexec/gnupg/gpg_keys_mailto to /usr/share/gnupg/
(it\'s a perl script)
- Update to GnuPG-1.2.0:
http://lists.gnupg.org/pipermail/gnupg-announce/2002q3/000252.html

* Better docu (new gnupg(7) manpage, gpgv info file)

* options file move to ~/.gnupg/gpg.conf

* Modules linked statically (except for deprecated idea plugin)

* Restrictions executing other helper programs configurable

* group command to work with several keys

* --interactive works as expected when importing keys now

* Full revocation key support

* export option leaving off attribute packets (e.g. photo ID
to not confuse keyservers)

* Workaround for HKP server subkey mangling bug in --import

* --atribute-fd support (photo ID)

* ElGamal encrypt AND sign as well as RSA E&S only available
in expert mode key generation

* MDC use increased

* preferred hash algos of a key are respected

* --pgp7 option sets all parameters for maximum PGP7 compat

* Permission/Ownership checks of keyrings clarified

* LDAP v1 keyserver support

* v3 keys can be self-signed with v4 signatures (for prefs)

* Default character set taken from current locale

Fri Jul 26 12:00:00 2002 - adrianAATTsuse.de
- fix neededforbuild

Tue Jun 18 12:00:00 2002 - meissnerAATTsuse.de
- powerpc64 is powerpc64, fixed MPI asm links.

Mon May 13 12:00:00 2002 - garloffAATTsuse.de
- Fix german --keyserver-options help text.

Sat May 11 12:00:00 2002 - garloffAATTsuse.de
- Update to gpg-1.0.7: See
http://lists.gnupg.org/pipermail/gnupg-announce/2002q2/000251.html

* Secret keys are now SHA-1 protected (protection against Rosa/
Klima attacks). --simple-sk-checksum disables this.

* Default cipher now CAST5, hash SHA-1.

* Symmetric encrypted messages use fixed file size if possible.
(Improved compatibility with PGP2,6,7; breaks PGP5.)

* Photographic user ID support (external viewer required).

* Enhanced keyserver support via plugins (NAI LDAP, HKP email).

* Support nonrevocable signatures (be careful!).

* Multiple signature classes.

* --pgp2,--pgp6 modes for messages to PGP2/6 users.

* Signatures can have expiration date as well now.

* Designated revocation keys supported (can not yet be generated
though).

* Permission checks for ~/.gnupg/ directory.

* New tool gpgsplit.

* Command \"primary\" in the edit menu to change primary UID.

* RSA key generation supported.

* Keyring managemanet reworked.

* Signature status storage changed. (Use --rebuild-keydb-caches).

* Key validation process (trustdb) reworked. See man page entries
for --update-trustdb, --check-trustdb and
--no-auto-check-trustdb

* Read-only keyrings now handled as expected.

* Many more ...
- Default RSA keysize to 1536 (instead of 1024)
- Default Photo ID viewer to kview (instead of xloadimage)

Sat May 11 12:00:00 2002 - garloffAATTsuse.de
- Add two patches for 1.0.6 from Werner Koch (for Woody):

* RNG fix (non critical)

* compatibility with keyrings produced with 1.0.6b or later

Mon Sep 10 12:00:00 2001 - garloffAATTsuse.de
- Fixed typos in README.SuSE
- Fix message telling user about allowed keysizes for the DSA case
(bug #9295).

Thu May 31 12:00:00 2001 - drahtAATTsuse.de
- update to 1.0.6 to fix the do_get format string error
ru locale is gone.

Fri May 18 12:00:00 2001 - garloffAATTsuse.de
- Many more problems found and (partially) corrected in the
translations (.po files) which could lead to similar trouble.
- Disabled ru translations as they are too buggy for me to fix.

Wed May 16 12:00:00 2001 - garloffAATTsuse.de
- Fix bug in tr locale triggered by gpg -v (bugzilla #8457)

Tue May 8 12:00:00 2001 - garloffAATTsuse.de
- Put (commented out) encrypt-to option in options skeleton to
help users finding a way to read their encrypted mail ...

Sun Apr 29 12:00:00 2001 - garloffAATTsuse.de
- Update to 1.0.5:

* Bugfixes and translations in addition to 1.0.4h changes.

Fri Apr 20 12:00:00 2001 - garloffAATTsuse.de
- Update to gnupg-1.0.4h:

* gpg could segfault on --check-sigs in fixup_uidnode, if
either uid of sig are 0.

Thu Apr 12 12:00:00 2001 - garloffAATTsuse.de
- Update to 1.0.4g:

* includes the security patches (secret key import, detached
signature checking)

* More bugfixes

* time.h fixes already included

* Warn user if signing with invalid signature (which prevents
the attack by altering the secret key)

Wed Feb 7 11:00:00 2001 - pthomasAATTsuse.de
- If system supports LC_MESSAGES, set LC_CTYPE along with
LC_MESSAGES. Required for correct i18n support in glibc2.2.
- Include time.h where necessary.

Fri Dec 15 11:00:00 2000 - garloffAATTsuse.de
- Include patch to require --allow-secret-key-import. Secret keys
are no longer silently imported.

Wed Dec 6 11:00:00 2000 - bkAATTsuse.de
- add /usr/lib/gnupg and /usr/share/gnupg to %files(obsoletes /
*\'s)
- doc: %doc %{_docdir}/gpg adds %{_docdir}/gpg to %files, marks
everything below it as documentation(obsoletes other %doc macros)

Fri Dec 1 11:00:00 2000 - garloffAATTsuse.de
- Added gnupg-1.0.4.security-patch1.diff from GnuPG site:
When checking detached signatures, gnupg could have been make
believe that the sig file contains the text to be checked,
so the real text would not have been checked :-(

Tue Oct 24 12:00:00 2000 - garloffAATTsuse.de
- Put it as updates on ftp servers.

Mon Oct 23 12:00:00 2000 - garloffAATTsuse.de
- Update to GnuPG-1.0.4:

* GnuPG <= 1.0.3 did incorrectly report messages with multiple
signatures to be correct, even if some sigs are not.
Fixed.

* Rijndael support.

* gpgv binary to just check signatures.

Tue Sep 19 12:00:00 2000 - garloffAATTsuse.de
- Update to GnuPG-1.0.3: Bugfixes:

* --trusted-key option

* expiration time of primary key can be changed again

* display Revoked with --list-key (if appropriate)
New features:

* --merge-only, --try-all-secrets

* Twofish and MDC support

* faq.html
and last but not least:

* RSA support

Wed Aug 9 12:00:00 2000 - garloffAATTsuse.de
- Update to 1.0.2 (Finally get rid of the devel version)
- Updated README.

Sat Jun 17 12:00:00 2000 - garloffAATTsuse.de
- Added tcl & expect to neededforbuild (needed for the checks)

Wed May 24 12:00:00 2000 - garloffAATTsuse.de
- Disable DEVELOPMENT VERSION warning

Fri May 19 12:00:00 2000 - garloffAATTsuse.de
- Added BuildRoot.

Fri May 19 12:00:00 2000 - garloffAATTsuse.de
- Fixed usage of %{_docdir}

Fri May 19 12:00:00 2000 - garloffAATTsuse.de
- Update to 1.01e-SuSE.
- Moved docs to %{_docdir}.

Sat Mar 4 11:00:00 2000 - garloffAATTsuse.de
- Fixed typo in german translation.
- Version renamed to 1.0.1c-SuSE.

Sun Feb 27 11:00:00 2000 - garloffAATTsuse.de
- Fixed perms of README.SuSE 755->644.

Tue Feb 22 11:00:00 2000 - garloffAATTsuse.de
- Updated to 1.0.1c (test version) after a discussion with WK.
Last workaround obsoleted by that.

Mon Feb 21 11:00:00 2000 - garloffAATTsuse.de
- Turned a fatal error (gpg: 231: read expected rec type 3, got 6)
into a warning.

Sat Feb 5 11:00:00 2000 - garloffAATTsuse.de
- Moved manpages to /usr/share/man.

Wed Jan 5 11:00:00 2000 - garloffAATTsuse.de
- Upgrade to version 1.0.1.

Wed Oct 13 12:00:00 1999 - garloffAATTsuse.de
- Back to 1.0.0. Developers obviously don\'t want us to use devel
versions.

Wed Oct 13 12:00:00 1999 - garloffAATTsuse.de
- Upgrade to 1.0.0e. Fixed typos in README.SuSE.

Fri Sep 24 12:00:00 1999 - garloffAATTsuse.de
- Fixed filelist.

Wed Sep 22 12:00:00 1999 - garloffAATTsuse.de
- Upgraded to version 1.0.0. Updated source locations.
Added README.SuSE.

Mon Sep 13 12:00:00 1999 - bsAATTsuse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.

Mon Aug 23 12:00:00 1999 - garloffAATTsuse.de
- Initial check in of gpg-0.9.10 and pgpgpg-0.13