gpgme/NEWS, branch bjk/masterGnuPG Made Easy.http://git.bktus.com/gpgfrontend/gpgme/atom?h=bjk%2Fmaster2014-08-12T15:51:38Zgpgme-tool: Install gpgme-tool.2014-08-12T15:51:38ZWerner Kochwk@gnupg.org2014-08-12T08:36:30Zurn:sha1:488e44cdb531035fa8813b95b212f9728abc7e62
* src/Makefile.am (bin_PROGRAMS): New. Add gpgme-tools.
(noinst_PROGRAMS): Remove.
Post release updates.2014-07-30T10:03:47ZWerner Kochwk@gnupg.org2014-07-30T10:03:47Zurn:sha1:bfe18a0651177025ff0a6b978a641bdd1472a0b1
--
Release 1.5.12014-07-30T09:47:31ZWerner Kochwk@gnupg.org2014-07-30T09:47:31Zurn:sha1:16835c3b5d1cea18512b2c93e884d8ca513a2ee7
* configure.ac: Change LT version to C24/A13/R0.
Fix possible realloc overflow for gpgsm and uiserver engines.2014-07-30T09:04:55ZWerner Kochwk@gnupg.org2014-07-30T09:04:55Zurn:sha1:2cbd76f7911fc215845e89b50d6af5ff4a83dd77
* src/engine-gpgsm.c (status_handler):
* src/engine-uiserver.c (status_handler):
--
After a realloc (realloc is also used for initial alloc) the allocated
size if the buffer is not correctly recorded. Thus an overflow can be
introduced by receiving data with different line lengths in a specific
order. This is not easy exploitable because libassuan constructs the
line. However a crash has been reported and thus it might be possible
to constructs an exploit.
CVE-id: CVE-2014-3564
Reported-by: Tomáš Trnka
Add new keylist mode GPGME_KEYLIST_MODE_WITH_SECRET.2014-06-04T07:57:54ZWerner Kochwk@gnupg.org2014-06-04T07:57:54Zurn:sha1:4dc9af24156b4fd52c7b76e7522b9b7a64e5386a
* src/gpgme.h.in (GPGME_KEYLIST_MODE_WITH_SECRET): New.
* src/engine-gpg.c (gpg_keylist_build_options): Handle new mode.
* src/engine-gpgsm.c (gpgsm_keylist, gpgsm_keylist_ext): Ditto.
* src/keylist.c (parse_sec_field15): Add arg key and take care of
--with-secret output.
* src/gpgme-tool.c (gt_get_keylist_mode, cmd_keylist_mode): Add
"with_secret". Print card info and and secret flag for subkeys.
--
Note: This mode may only be used with GnuPG >= 2.1.
Post release updates2014-05-21T07:43:53ZWerner Kochwk@gnupg.org2014-05-21T07:43:53Zurn:sha1:ee0f17736ec18074700ae83cdf6821e5f8c19c7c
--
Release 1.5.0.2014-05-21T07:08:42ZWerner Kochwk@gnupg.org2014-05-21T07:08:42Zurn:sha1:0eca21113c1d1ab2aea58e1ea21075f472f99c23
* configure.ac: Change LT version to C22/A11/R0.
Add 6 new GPGME_STATUS_ codes.2014-05-13T14:08:01ZWerner Kochwk@gnupg.org2014-05-13T13:44:52Zurn:sha1:de6caeed6d6432101c673c35717f152d5facf823
* src/status-table.c: Also add missing DECRYPTION_INFO entry.
Add field CURVE to the key info.2014-05-08T18:39:15ZWerner Kochwk@gnupg.org2014-05-08T18:39:15Zurn:sha1:88f15336ec0eadde68ff2618349efb9006b8e801
* src/gpgme.h.in (struct _gpgme_subkey): Add field CURVE.
* src/key.c (gpgme_key_unref): Free CURVE.
* src/keylist.c (keylist_colon_handler): Set CURVE.
* src/gpgme.c (gpgme_release): For failsafe reasons reset engine and
engine info after freeing.
--
The engine hack is useful in case the other release functions
accidently call engine release.
Map public key algos returned by gpg to gpgme values.2014-05-08T12:11:58ZWerner Kochwk@gnupg.org2014-05-08T12:03:14Zurn:sha1:d5fb92cdaed21eea2f1a921e4f11df72635a8462
* src/conversion.c (_gpgme_map_pk_algo): New.
* src/decrypt.c (parse_enc_to): Add arg PROTOCOL and map pubkey algo.
(_gpgme_decrypt_status_handler): Map pubkey algo.
* src/keylist.c (keylist_colon_handler): Map pubkey algo.
* src/sign.c (parse_sig_created): Add arg PROTOCOL and map pubkey
algo.
* src/verify.c (parse_new_sig): Ditto.
(parse_valid_sig): Ditto.
* src/gpgme.h.in (GPGME_PK_ECC): New.
(GPGME_MD_SHA224): New.
* src/gpgme.c (gpgme_pubkey_algo_name): Add GPGME_PK_ECC case.
(gpgme_hash_algo_name): Add GPGME_MD_SHA224.
--
This affects only the not yet released ECC code of GnuPG 2.1.