Change log for libgcrypt20 package in Debian

libgcrypt20 (1.6.5+git20160413+8472b-1) experimental; urgency=medium

  * New upstream snapshot.
  * Use hardening=+bindnow instead of hardening=+all, we are mainly shipping
    libraries, including static ones.

 -- Andreas Metzler <email address hidden>  Wed, 13 Apr 2016 18:54:07 +0200

libgcrypt20 (1.6.5+git20160407+5e5d3-1) experimental; urgency=medium

  * New upstream snapshot.

 -- Andreas Metzler <email address hidden>  Thu, 07 Apr 2016 18:56:20 +0200

libgcrypt20 (1.6.3-2+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * ecc: input validation on ECDH
  * ecc: Constant-time multiplication for Weierstrass curve (CVE-2015-7511)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 10 Feb 2016 07:18:35 +0100

libgcrypt20 (1.6.5+git20160329+48ee9-1) experimental; urgency=medium

  * New upstream snapshot.
  * Drop 40_Fix-building-random-drbg-for-Win32-64.patch, removal of
    src/gcrypt.h in debian/clean is unnecessary, too.
  * Build with DEB_BUILD_MAINT_OPTIONS := hardening=+all.

 -- Andreas Metzler <email address hidden>  Wed, 30 Mar 2016 19:15:01 +0200

libgcrypt20 (1.6.5+git20160220+839d12c-2) experimental; urgency=medium

  [ Andreas Metzler ]
  * Drop build/ from debian/clean, passing --builddirectory=build on dh $@
    line makes this unnecessary.
  * 40_Fix-building-random-drbg-for-Win32-64.patch from upstream GIT: Remove
    include for sys/types.h and asm/types.h. Fixes FTBFS in win* (and
    possibly kfreebsd-*).
  * 25_norevisionfromgit.diff: Hardcode dummy values instead of trying to pull
    revision/version info from GIT when autoconf is run.
  * Delete generated header src/gcrypt.h on clean. - The version shipped in
    the tarball can have different content than a freshly generated one, and
    with out-of-tree-builds the outdated version is not overwritten.

  [ Daniel Kahn Gillmor ]
  * Add libgcrypt-mingw-w64-dev package which will allow building a gpgv-win32
    package for debian installer's win32-loader. Closes: #814954

 -- Andreas Metzler <email address hidden>  Mon, 22 Feb 2016 18:50:38 +0100

libgcrypt20 (1.6.5+git20160220+839d12c-1) experimental; urgency=medium

  [ Daniel Kahn Gillmor ]
  * Build out-of-tree for cleanliness.

  [ Andreas Metzler ]
  * Also set --builddirectory=build on dh $@ line.
  * New git snapshot, drop 30_bufhelp-disable-unaligned-ppc.patch.

 -- Andreas Metzler <email address hidden>  Sat, 20 Feb 2016 16:28:56 +0100

libgcrypt20 (1.6.5+git20160212+a9b64-2) experimental; urgency=low

  * Add 30_bufhelp-disable-unaligned-ppc.patch by Jussi Kivilinn (Disable
    unaligned memory accesses on powerpc*) to fix errors on ppc64el.

 -- Andreas Metzler <email address hidden>  Sat, 13 Feb 2016 11:41:22 +0100

libgcrypt20 (1.6.5+git20160212+a9b64-1) experimental; urgency=medium

  * Upload upstream git master branch to experimental to get some buildd
    exposure.
  * New upstream version (preparing for 1.7.0):
    + Drop 30_support_source_date_epoch.diff. Upstream now defaults to no
      build-stamp.
    + Drop 20_fedora_libgcrypt-1.6.3-aliasing.patch. It does not apply cleanly
      and we want to test unpatched buildability anyway.
    + List newly added symbols in symbols file.
    + Update debian/copyright from AUTORS and LICENSES. RFC 1952 code is gone.
      Closes: #745453
    + Core enums have been extended (gcry_ctl_cmds, gcry_cipher_algos,
      gcry_cipher_modes, gcry_pk_algos, gcry_md_algos, gcry_mac_algo) after
      addition of inter alia SHA-3, ChaCha20, Poly1305, curve sec256k1 and
      curves GOST R 34.10-2001 and GOST R 34.10-2012. Be paraniod and bump
      Debian dependency info (via debian/libgcrypt20.symbols) to >= 1.7.0.

 -- Andreas Metzler <email address hidden>  Fri, 12 Feb 2016 10:18:00 +0100

libgcrypt20 (1.6.5-2) unstable; urgency=medium

  * serial-tests was added in automake 1.12, add versioned b-d.
  * Upload to unstable.

 -- Andreas Metzler <email address hidden>  Wed, 10 Feb 2016 12:01:58 +0100

Available diffs

• diff from 1.6.4-5 to 1.6.5-2 (9.2 KiB)
• diff from 1.6.4-5ubuntu1 (in Ubuntu) to 1.6.5-2 (10.6 KiB)

libgcrypt20 (1.6.5-1) experimental; urgency=medium

  * New upstream bugfix release.
    + Mitigate side-channel attack on ECDH with Weierstrass curves
     [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
     details.

 -- Andreas Metzler <email address hidden>  Tue, 09 Feb 2016 19:52:06 +0100

libgcrypt20 (1.6.4-5) unstable; urgency=medium

  * Move Vcs-* from git/http to https.
  * Add 30_support_source_date_epoch.diff: Support setting BUILD_TIMESTAMP
    using SOURCE_DATE_EPOCH through the SOURCE_DATE_EPOCH environment
    variable. (Thanks, Jérémy Bobbio!). Use/b-d on dh-autoreconf instead of
    autotools-dev. Closes: #812428

 -- Andreas Metzler <email address hidden>  Sun, 24 Jan 2016 16:00:41 +0100

Available diffs

• diff from 1.6.4-4 to 1.6.4-5 (1.4 KiB)

libgcrypt20 (1.6.4-4) unstable; urgency=medium

  * Delete build-aux/texinfo.tex and let texinfo use the system copy instead
    to prevent breakage in pdf generation in UTF-8 locale. Closes: #803081
  * Migrate from libgcrypt20-dbg to ddebs. dh_strip's --ddeb-migration
    option was added to debhelper/unstable with version 9.20150628, bump
    build-dependency accordingly.

 -- Andreas Metzler <email address hidden>  Fri, 25 Dec 2015 14:06:18 +0100

Available diffs

• diff from 1.6.4-3 to 1.6.4-4 (1.4 KiB)

libgcrypt20 (1.6.4-3) unstable; urgency=medium

  * Upload to unstable.
  * Ship pdf instead of postscript docs.

 -- Andreas Metzler <email address hidden>  Sun, 18 Oct 2015 13:37:58 +0200

Available diffs

• diff from 1.6.3-2ubuntu1 (in Ubuntu) to 1.6.4-3 (19.6 KiB)

libgcrypt20 (1.6.4-2) experimental; urgency=medium

  * Pull 20_fedora_libgcrypt-1.6.3-aliasing.patch from Fedora to fix testsuite
    error with gcc5 on ppc64.

 -- Andreas Metzler <email address hidden>  Sat, 03 Oct 2015 18:06:52 +0200

libgcrypt20 (1.6.4-1) experimental; urgency=medium

  * libgcrypt-config: Do not fail on missing dpkg-architecture.
    Closes: #796818
  * New upstream version.

 -- Andreas Metzler <email address hidden>  Sat, 26 Sep 2015 13:22:15 +0200

libgcrypt20 (1.6.3-2) unstable; urgency=medium


  * Upload to unstable.
  * Fix Vcs-Browser link.

 -- Andreas Metzler <email address hidden>  Sun, 01 Mar 2015 13:46:59 +0100

libgcrypt20 (1.6.3-1) experimental; urgency=medium


  * Use ascii-armored debian/upstream/signing-key.asc instead of
    debian/upstream-signing-key.pgp for uscan's verification. This alllows us
    to drop debian/source/include-binaries. Add 2071B08A33BD3F06 as accepted
    key.
  * New upstream release.

 -- Andreas Metzler <email address hidden>  Sat, 28 Feb 2015 13:18:25 +0100

libgcrypt20 (1.6.2-4) unstable; urgency=medium


  * Add libgcrypt11-dev transitional package. It Breaks libgnutls-dev
    (<< 2.12.23-18), because addition of a dummy package does not magically
    fix GnuTLS 2.x incompatibilities with libgcrypt20.

 -- Andreas Metzler <email address hidden>  Sat, 27 Sep 2014 14:12:54 +0200

libgcrypt20 (1.6.2-3) unstable; urgency=medium


  * libgcrypt20-dev provides libgcrypt-dev.

 -- Andreas Metzler <email address hidden>  Sun, 31 Aug 2014 15:50:01 +0200

libgcrypt20 (1.6.2-2) unstable; urgency=medium


  * Upload to unstable.

 -- Andreas Metzler <email address hidden>  Sun, 24 Aug 2014 07:38:52 +0200

libgcrypt20 (1.6.2-1) experimental; urgency=medium


  * New upstream bugfix release.
  * Upload to experimental, do not delay propagation of udeb (#758756) to
    testing.

 -- Andreas Metzler <email address hidden>  Thu, 21 Aug 2014 19:38:21 +0200

libgcrypt20 (1.6.1-3) unstable; urgency=high


  * Add udeb. Closes: #758756

 -- Andreas Metzler <email address hidden>  Thu, 21 Aug 2014 19:04:59 +0200

libgcrypt20 (1.6.1-2) unstable; urgency=medium


  * libgcrypt20-dev does not provide libgcrypt-dev anymore and conflicts with
    libgcrypt11-dev in addition to the virtual package libgcrypt-dev.
    The previous setup of having libgcryptXX-dev provide/conflict
    libgcrypt-dev breaks for packages build-depending on the virtual package.
    Closes: #741959

 -- Andreas Metzler <email address hidden>  Mon, 17 Mar 2014 19:14:23 +0100

Available diffs

• diff from 1.6.1-1 to 1.6.1-2 (593 bytes)

libgcrypt20 (1.6.1-1) unstable; urgency=medium


  * New upstream version.
    + New member in gcry_md_flags, bump dependency version of gcry_md_open().
    + GCRYCTL_INACTIVATE_FIPS_FLAG/GCRYCTL_REACTIVATE_FIPS_FLAG reserved but
      returning a GPG_ERR_NOT_IMPLEMENTED yet. Bump dependency version of
      gcry_control().
  * Fix c'n'p error in Vcs-Git field. Closes: #737022

 -- Andreas Metzler <email address hidden>  Wed, 29 Jan 2014 16:21:56 +0100

Available diffs

• diff from 1.6.0-2ubuntu2 (in Ubuntu) to 1.6.1-1 (486.2 KiB)

libgcrypt20 (1.6.0-2) unstable; urgency=low


  * Upload to unstable.
  * Add description to 12_lessdeps_libgcrypt-config.diff.

 -- Andreas Metzler <email address hidden>  Sat, 04 Jan 2014 13:15:57 +0100

libgcrypt20 (1.6.0-1) experimental; urgency=low


  * Point vcs* to git.
  * New upstream version.
    + Update symbol file.
    + Rename all (including -dev) packages to match soname bump. Because of
      API changes gnutls26 cannot be built against gcrypt 1.6.0. As we are not
      ready to drop gnutls26 and it seems unlikely that gnutls upstream makes
      feature changes to its old-old-old-stable release we will need to keep
      the old gcrypt development package around.
    + Don't build udeb for the time being.
    + Update version of libgpg-error-dev build-dependency.
  * Drop Breaks with old, gcrypt-1.5.x incompatible versions of gnupg2, gpgsm
    and libgnutls26.
  * Ship hmac256.1 in libgcrypt20-dev.
  * Add debian/upstream-signing-key.pgp (listed in
    debian/source/include-binaries) and update watchfile to check
    upstream signature.
  * Edit "image path" entries in info docs to point /usr/share/doc/.../html.
  * Replace /usr/share/doc/libgcrypt20-dbg with a symlink to
    /usr/share/doc/libgcrypt20.

 -- Andreas Metzler <email address hidden>  Sun, 22 Dec 2013 15:51:07 +0100