gpgme/NEWS, branch gpgme-1.5.2 GnuPG Made Easy. http://git.bktus.com/gpgfrontend/gpgme/atom?h=gpgme-1.5.2 2014-11-21T20:19:26Z Release 1.5.2. 2014-11-21T20:19:26Z Werner Koch wk@gnupg.org 2014-11-21T20:19:26Z urn:sha1:c62ce32b9c01ee9ceb1d69e7344fb79a9162d232 * configure.ac: Set LT version to C24/A13/R1. gpgme-tool: Install gpgme-tool. 2014-08-12T15:51:38Z Werner Koch wk@gnupg.org 2014-08-12T08:36:30Z urn:sha1:488e44cdb531035fa8813b95b212f9728abc7e62 * src/Makefile.am (bin_PROGRAMS): New. Add gpgme-tools. (noinst_PROGRAMS): Remove. Post release updates. 2014-07-30T10:03:47Z Werner Koch wk@gnupg.org 2014-07-30T10:03:47Z urn:sha1:bfe18a0651177025ff0a6b978a641bdd1472a0b1 -- Release 1.5.1 2014-07-30T09:47:31Z Werner Koch wk@gnupg.org 2014-07-30T09:47:31Z urn:sha1:16835c3b5d1cea18512b2c93e884d8ca513a2ee7 * configure.ac: Change LT version to C24/A13/R0. Fix possible realloc overflow for gpgsm and uiserver engines. 2014-07-30T09:04:55Z Werner Koch wk@gnupg.org 2014-07-30T09:04:55Z urn:sha1:2cbd76f7911fc215845e89b50d6af5ff4a83dd77 * src/engine-gpgsm.c (status_handler): * src/engine-uiserver.c (status_handler): -- After a realloc (realloc is also used for initial alloc) the allocated size if the buffer is not correctly recorded. Thus an overflow can be introduced by receiving data with different line lengths in a specific order. This is not easy exploitable because libassuan constructs the line. However a crash has been reported and thus it might be possible to constructs an exploit. CVE-id: CVE-2014-3564 Reported-by: Tomáš Trnka Add new keylist mode GPGME_KEYLIST_MODE_WITH_SECRET. 2014-06-04T07:57:54Z Werner Koch wk@gnupg.org 2014-06-04T07:57:54Z urn:sha1:4dc9af24156b4fd52c7b76e7522b9b7a64e5386a * src/gpgme.h.in (GPGME_KEYLIST_MODE_WITH_SECRET): New. * src/engine-gpg.c (gpg_keylist_build_options): Handle new mode. * src/engine-gpgsm.c (gpgsm_keylist, gpgsm_keylist_ext): Ditto. * src/keylist.c (parse_sec_field15): Add arg key and take care of --with-secret output. * src/gpgme-tool.c (gt_get_keylist_mode, cmd_keylist_mode): Add "with_secret". Print card info and and secret flag for subkeys. -- Note: This mode may only be used with GnuPG >= 2.1. Post release updates 2014-05-21T07:43:53Z Werner Koch wk@gnupg.org 2014-05-21T07:43:53Z urn:sha1:ee0f17736ec18074700ae83cdf6821e5f8c19c7c -- Release 1.5.0. 2014-05-21T07:08:42Z Werner Koch wk@gnupg.org 2014-05-21T07:08:42Z urn:sha1:0eca21113c1d1ab2aea58e1ea21075f472f99c23 * configure.ac: Change LT version to C22/A11/R0. Add 6 new GPGME_STATUS_ codes. 2014-05-13T14:08:01Z Werner Koch wk@gnupg.org 2014-05-13T13:44:52Z urn:sha1:de6caeed6d6432101c673c35717f152d5facf823 * src/status-table.c: Also add missing DECRYPTION_INFO entry. Add field CURVE to the key info. 2014-05-08T18:39:15Z Werner Koch wk@gnupg.org 2014-05-08T18:39:15Z urn:sha1:88f15336ec0eadde68ff2618349efb9006b8e801 * src/gpgme.h.in (struct _gpgme_subkey): Add field CURVE. * src/key.c (gpgme_key_unref): Free CURVE. * src/keylist.c (keylist_colon_handler): Set CURVE. * src/gpgme.c (gpgme_release): For failsafe reasons reset engine and engine info after freeing. -- The engine hack is useful in case the other release functions accidently call engine release.