From f557a7e653c8aebb9da8b2437e16eff35cefec95 Mon Sep 17 00:00:00 2001 From: bernd Date: Mon, 7 Aug 2006 19:59:20 +0000 Subject: [PATCH] Security update to gnupg-1.4.5. (CVE-2006-3746) This fixes a denial of service vulnerability. For more information see: http://secunia.com/advisories/21297/ http://lists.gnupg.org/pipermail/gnupg-announce/2006q3/000229.html okay espie@ --- security/gnupg/Makefile | 4 ++-- security/gnupg/distinfo | 8 ++++---- security/gnupg/patches/patch-cipher_Makefile_in | 8 ++++---- security/gnupg/patches/patch-doc_Makefile_in | 8 ++++---- security/gnupg/patches/patch-g10_Makefile_in | 8 ++++---- security/gnupg/patches/patch-keyserver_Makefile_in | 8 ++++---- security/gnupg/patches/patch-tools_Makefile_in | 8 ++++---- security/gnupg/patches/patch-util_Makefile_in | 8 ++++---- security/gnupg/pkg/PLIST | 3 ++- 9 files changed, 32 insertions(+), 31 deletions(-) diff --git a/security/gnupg/Makefile b/security/gnupg/Makefile index b5bd724e14f..8813cb83623 100644 --- a/security/gnupg/Makefile +++ b/security/gnupg/Makefile @@ -1,8 +1,8 @@ -# $OpenBSD: Makefile,v 1.60 2006/08/03 23:28:12 espie Exp $ +# $OpenBSD: Makefile,v 1.61 2006/08/07 19:59:20 bernd Exp $ COMMENT= "GNU privacy guard - a free PGP replacement" -DISTNAME= gnupg-1.4.4 +DISTNAME= gnupg-1.4.5 CATEGORIES= security MASTER_SITES= ftp://ftp.gnupg.org/gcrypt/gnupg/ \ diff --git a/security/gnupg/distinfo b/security/gnupg/distinfo index f69d5de86c2..4767f6de87a 100644 --- a/security/gnupg/distinfo +++ b/security/gnupg/distinfo @@ -1,8 +1,8 @@ -MD5 (gnupg-1.4.4.tar.gz) = 121fe29ff6da6a6574b22a61a70812c4 +MD5 (gnupg-1.4.5.tar.gz) = b7e29aba10d595114dc8ff8498988957 MD5 (idea.c.gz) = 9dc3bc086824a8c7a331f35e09a3e57f -RMD160 (gnupg-1.4.4.tar.gz) = 3b7240ffbf352e852fe59f405edb8a033e9fb7a2 +RMD160 (gnupg-1.4.5.tar.gz) = 9fca89ef69ded38b4b81f206ffa4d92a38e9b613 RMD160 (idea.c.gz) = e35be5a031d10d52341ac5f029d28f811edd908d -SHA1 (gnupg-1.4.4.tar.gz) = 3d504d7d31e6d9b81bf33a25bec08bc5e6c0fc0c +SHA1 (gnupg-1.4.5.tar.gz) = 4f8705dec4a32a19cd972a61244fd676fbc28bd7 SHA1 (idea.c.gz) = 82fded4ec31b97b3b2dd22741880b67cfee40f84 -SIZE (gnupg-1.4.4.tar.gz) = 4272825 +SIZE (gnupg-1.4.5.tar.gz) = 4348833 SIZE (idea.c.gz) = 5216 diff --git a/security/gnupg/patches/patch-cipher_Makefile_in b/security/gnupg/patches/patch-cipher_Makefile_in index c5d30086112..aa239ebbc99 100644 --- a/security/gnupg/patches/patch-cipher_Makefile_in +++ b/security/gnupg/patches/patch-cipher_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-cipher_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- cipher/Makefile.in.orig Mon Apr 3 11:45:05 2006 -+++ cipher/Makefile.in Fri Apr 7 18:28:39 2006 -@@ -311,7 +311,7 @@ sbindir = @sbindir@ +$OpenBSD: patch-cipher_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- cipher/Makefile.in.orig Tue Aug 1 12:41:48 2006 ++++ cipher/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -310,7 +310,7 @@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ diff --git a/security/gnupg/patches/patch-doc_Makefile_in b/security/gnupg/patches/patch-doc_Makefile_in index affffc8d2e5..7e8a14cbc12 100644 --- a/security/gnupg/patches/patch-doc_Makefile_in +++ b/security/gnupg/patches/patch-doc_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-doc_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- doc/Makefile.in.orig Mon Apr 3 11:45:06 2006 -+++ doc/Makefile.in Fri Apr 7 18:28:39 2006 -@@ -308,7 +308,7 @@ info_TEXINFOS = gpg.texi gpgv.texi +$OpenBSD: patch-doc_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- doc/Makefile.in.orig Tue Aug 1 12:41:48 2006 ++++ doc/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -307,7 +307,7 @@ info_TEXINFOS = gpg.texi gpgv.texi # Need this to avoid building of dvis with automake 1.4 DVIS = diff --git a/security/gnupg/patches/patch-g10_Makefile_in b/security/gnupg/patches/patch-g10_Makefile_in index 531bf533f23..a47c8d94f18 100644 --- a/security/gnupg/patches/patch-g10_Makefile_in +++ b/security/gnupg/patches/patch-g10_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-g10_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- g10/Makefile.in.orig Mon Apr 3 11:45:06 2006 -+++ g10/Makefile.in Fri Apr 7 18:29:50 2006 -@@ -347,7 +347,7 @@ sbindir = @sbindir@ +$OpenBSD: patch-g10_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- g10/Makefile.in.orig Tue Aug 1 12:41:48 2006 ++++ g10/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -346,7 +346,7 @@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ diff --git a/security/gnupg/patches/patch-keyserver_Makefile_in b/security/gnupg/patches/patch-keyserver_Makefile_in index 633dc46ab66..900dba01cfa 100644 --- a/security/gnupg/patches/patch-keyserver_Makefile_in +++ b/security/gnupg/patches/patch-keyserver_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-keyserver_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- keyserver/Makefile.in.orig Mon Apr 3 11:45:06 2006 -+++ keyserver/Makefile.in Fri Apr 7 18:28:39 2006 -@@ -338,7 +338,7 @@ sbindir = @sbindir@ +$OpenBSD: patch-keyserver_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- keyserver/Makefile.in.orig Tue Aug 1 12:41:49 2006 ++++ keyserver/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -325,7 +325,7 @@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ diff --git a/security/gnupg/patches/patch-tools_Makefile_in b/security/gnupg/patches/patch-tools_Makefile_in index 2a942f4f39f..eb6f2b092c1 100644 --- a/security/gnupg/patches/patch-tools_Makefile_in +++ b/security/gnupg/patches/patch-tools_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-tools_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- tools/Makefile.in.orig Mon Apr 3 11:45:07 2006 -+++ tools/Makefile.in Fri Apr 7 18:28:39 2006 -@@ -318,7 +318,7 @@ sharedstatedir = @sharedstatedir@ +$OpenBSD: patch-tools_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- tools/Makefile.in.orig Tue Aug 1 12:41:50 2006 ++++ tools/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -320,7 +320,7 @@ sharedstatedir = @sharedstatedir@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ EXTRA_DIST = lspgpot ring-a-party mail-signed-keys convert-from-106 diff --git a/security/gnupg/patches/patch-util_Makefile_in b/security/gnupg/patches/patch-util_Makefile_in index c415145338d..0d5fdb70380 100644 --- a/security/gnupg/patches/patch-util_Makefile_in +++ b/security/gnupg/patches/patch-util_Makefile_in @@ -1,7 +1,7 @@ -$OpenBSD: patch-util_Makefile_in,v 1.3 2006/04/12 09:55:24 bernd Exp $ ---- util/Makefile.in.orig Mon Apr 3 11:45:07 2006 -+++ util/Makefile.in Fri Apr 7 18:28:39 2006 -@@ -321,7 +321,7 @@ sbindir = @sbindir@ +$OpenBSD: patch-util_Makefile_in,v 1.4 2006/08/07 19:59:20 bernd Exp $ +--- util/Makefile.in.orig Tue Aug 1 12:41:50 2006 ++++ util/Makefile.in Wed Aug 2 12:46:04 2006 +@@ -320,7 +320,7 @@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ diff --git a/security/gnupg/pkg/PLIST b/security/gnupg/pkg/PLIST index bfc58849cae..7f3beced228 100644 --- a/security/gnupg/pkg/PLIST +++ b/security/gnupg/pkg/PLIST @@ -1,4 +1,4 @@ -@comment $OpenBSD: PLIST,v 1.19 2006/04/12 09:55:24 bernd Exp $ +@comment $OpenBSD: PLIST,v 1.20 2006/08/07 19:59:20 bernd Exp $ bin/gpg bin/gpg-zip bin/gpgsplit @@ -45,6 +45,7 @@ share/locale/hu/LC_MESSAGES/gnupg.mo share/locale/id/LC_MESSAGES/gnupg.mo share/locale/it/LC_MESSAGES/gnupg.mo share/locale/ja/LC_MESSAGES/gnupg.mo +share/locale/nb/LC_MESSAGES/gnupg.mo share/locale/pl/LC_MESSAGES/gnupg.mo share/locale/pt/LC_MESSAGES/gnupg.mo share/locale/pt_BR/LC_MESSAGES/gnupg.mo