{"push_id":775667966,"size":99,"distinct_size":99,"ref":"refs/heads/STABLE-BRANCH-2-0","head":"80521c3ff900a09a1b382869783187c463144c77","before":"36179da032fa43d82042b3d31ed175d17b8e9bc4","commits":[{"sha":"3e14da863a668fb0ec1a075722bd0f7b47ae4c1b","author":{"email":"b1356865a0eefd1fb76a8b663fad027be4bc9b61@fifthhorseman.net","name":"Daniel Kahn Gillmor"},"message":"gpg: Avoid duplicate declaration of {no-,}sk-comments noops.\n\n* g10/gpg.c: Cleanup argument parsing.\n\n--\n\nWith c76117f8b0165fe5cec5e7f234f55f5a4cd7f0ab, the GnuPG 2.0.x branch\naccidentally introduced a second (identical) argument parser for both\n--sk-comments, and for --no-sk-comments.\n\nThis caused short versions (e.g. omitting the trailing \"s\", as gpgme\ndoes) of either command to fail with:\n\n   gpg: option \"--sk-comment\" is ambiguous","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/3e14da863a668fb0ec1a075722bd0f7b47ae4c1b"},{"sha":"dcb5fa8747e8fc9f35285f168ee3ae8e6d422293","author":{"email":"b1356865a0eefd1fb76a8b663fad027be4bc9b61@fifthhorseman.net","name":"Daniel Kahn Gillmor"},"message":"gpg: --compress-sigs and --compress-keys are not no-ops in 2.0\n\n* g10/gpg.c: Cleanup argument parsing.\n\n--\n\nc76117f8b0165fe5cec5e7f234f55f5a4cd7f0ab mistakenly marked\ncompress-sigs and compress-keys as no-ops on the 2.0.x branch.\n\nThese options still have an effect on the 2.0.x branch, and the\nduplicate declaration also causes the gpg argument parser to fail when\nshortened versions of the option are present, like:\n\n  gpg: option \"--compress-k\" is ambiguous","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/dcb5fa8747e8fc9f35285f168ee3ae8e6d422293"},{"sha":"39c5d991a8fe9187bfbe71d0ff06630fea36fae0","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"build: Update m4 scripts\n\n* m4/gpg-error.m4: Update from Libgpg-error git master.\n* m4/libgcrypt.m4: Update from Libgcrypt git master.\n* configure.ac: Declare SYSROOT a precious variable.  Add extra error\nmessage for library configuration mismatches.","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/39c5d991a8fe9187bfbe71d0ff06630fea36fae0"},{"sha":"f952fe8c6ddf13ecca14ca72a27d1f8da6adc901","author":{"email":"b1356865a0eefd1fb76a8b663fad027be4bc9b61@fifthhorseman.net","name":"Daniel Kahn Gillmor"},"message":"gpg: Add build and runtime support for larger RSA keys\n\n* configure.ac: Added --enable-large-secmem option.\n* g10/options.h: Add opt.flags.large_rsa.\n* g10/gpg.c: Contingent on configure option: adjust secmem size,\nadd gpg --enable-large-rsa, bound to opt.flags.large_rsa.\n* g10/keygen.c: Adjust max RSA size based on opt.flags.large_rsa\n* doc/gpg.texi: Document --enable-large-rsa.\n\n--\n\nThis is a cherry-pick of 534e2876acc05f9f8d9b54c18511fe768d77dfb5 from\nSTABLE-BRANCH-1-4 against STABLE-BRANCH-2-0\n\nSome older implementations built and used RSA keys up to 16Kib, but\nthe larger secret keys now fail when used by more recent GnuPG, due to\nsecure memory limitations.\n\nBuilding with ./configure --enable-large-secmem will make gpg\ncapable of working with those secret keys, as well as permitting the\nuse of a new gpg option --enable-large-rsa, which let gpg generate RSA\nkeys up to 8Kib when used with --batch --gen-key.\n\nDebian-bug-id: 739424\n\nMinor edits by wk.\n\nGnuPG-bug-id: 1732","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/f952fe8c6ddf13ecca14ca72a27d1f8da6adc901"},{"sha":"9112fed78b33faae32d21ab581721758ae2e95f2","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Avoid using cached MD5 signature status.\n\n* g10/sig-check.c (check_key_signature2): Avoid using a cached MD5\nsignature status.\n* g10/keyring.c (keyring_get_keyblock): Ditto.\n(write_keyblock): Ditto.\n\n* g10/sig-check.c (do_check): Move reject warning to ...\n* g10/misc.c (print_md5_rejected_note): new.\n--\n\nSigned-off-by: Werner Koch <wk@gnupg.org>","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/9112fed78b33faae32d21ab581721758ae2e95f2"},{"sha":"eb756e2510bfcae3339e0907a7e4cacdea59b175","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Show v3 key fingerprints as all zero.\n\n* g10/keyid.c (fingerprint_from_pk): Show v3 fingerprints as all zero.\n--\n\nMD5 is considered broken for a long time now.  To make it easier for\nusers to notice that a listing shows a v3 key, the fingerprint is now\ndisplayed as 16 zero bytes unless --allow-weak-digest-algos is active.\n\nSigned-off-by: Werner Koch <wk@gnupg.org>","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/eb756e2510bfcae3339e0907a7e4cacdea59b175"},{"sha":"da95d0d37841b34e2f3d7047f14ab4d98a7c0c56","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Add import option \"keep-ownertrust\".\n\n* g10/options.h (IMPORT_KEEP_OWNERTTRUST): New.\n* g10/import.c (parse_import_options): Add \"keep-ownertrust\".\n(import_one): Act upon new option.\n--\n\nThis option is in particular useful to convert from a pubring.gpg to\nthe new pubring.kbx in GnuPG 2.1 or vice versa:\n\ngpg1 --export | gpg2 --import-options keep-ownertrust --import\n\n(cherry-picked from commit ffc2307843ce6c4ac3c8d99ba8c70ffa1ae28e39)","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/da95d0d37841b34e2f3d7047f14ab4d98a7c0c56"},{"sha":"a5ca45e6168e75aa6f3743b764d601ab3df966b7","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Make the use of \"--verify FILE\" for detached sigs harder.\n\n* g10/openfile.c (open_sigfile): Factor some code out to ...\n(get_matching_datafile): new function.\n* g10/plaintext.c (hash_datafiles): Do not try to find matching file\nin batch mode.\n* g10/mainproc.c (check_sig_and_print): Print a warning if a possibly\nmatching data file is not used by a standard signatures.\n--\n\nAllowing to use the abbreviated form for detached signatures is a long\nstanding bug which has only been noticed by the public with the\nrelease of 2.1.0.  :-(\n\nWhat we do is to remove the ability to check detached signature in\n--batch using the one file abbreviated mode.  This should exhibit\nproblems in scripts which use this insecure practice.  We also print a\nwarning if a matching data file exists but was not considered because\nthe detached signature was actually a standard signature:\n\n  gpgv: Good signature from \"Werner Koch (dist sig)\"\n  gpgv: WARNING: not a detached signature; \\\n  file 'gnupg-2.1.0.tar.bz2' was NOT verified!\n\nWe can only print a warning because it is possible that a standard\nsignature is indeed to be verified but by coincidence a file with a\nmatching name is stored alongside the standard signature.\n\nReported-by: Simon Nicolussi (to gnupg-users on Nov 7)\nSigned-off-by: Werner Koch <wk@gnupg.org>\n\n(backported from commit 69384568f66a48eff3968bb1714aa13925580e9f)","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/a5ca45e6168e75aa6f3743b764d601ab3df966b7"},{"sha":"a1c861ed380548ccd2819d3f6506ebbad9246561","author":{"email":"34feb69f206f6fec69fb4bd79c126fcbde2c8e6a@fsij.org","name":"NIIBE Yutaka"},"message":"po: Update Japanese translation.\n\n--","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/a1c861ed380548ccd2819d3f6506ebbad9246561"},{"sha":"92a7949ae6331b5e188480b76ce29a86ede6e89e","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Fix a NULL-deref for invalid input data.\n\n* g10/mainproc.c (proc_encrypted): Take care of canceled passpharse\nentry.\n--\n\nGnuPG-bug-id: 1761\nSigned-off-by: Werner Koch <wk@gnupg.org>\n\n(backported from commit 32e85668b82f6fbcb824eea9548970804fb41d9e)","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/92a7949ae6331b5e188480b76ce29a86ede6e89e"},{"sha":"7a068ac50bc48de26e93cfeadf412b37257f97d5","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Fix off-by-one read in the attribute subpacket parser.\n\n* g10/parse-packet.c (parse_attribute_subpkts): Check that the\nattribute packet is large enough for the subpacket type.\n--\n\nReported-by: Hanno Böck\nSigned-off-by: Werner Koch <wk@gnupg.org>\n\n(backported from commit 0988764397f99db4efef1eabcdb8072d6159af76)","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/7a068ac50bc48de26e93cfeadf412b37257f97d5"},{"sha":"1f9dfe1fedad215140011257d9b1bb21bc368179","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"gpg: Fix use of uninit.value in listing sig subpkts.\n\n* g10/parse-packet.c (dump_sig_subpkt): Print regex subpacket\nsanitized.\n--\n\nWe may not use \"%s\" to print an arbitrary buffer.  At least \"%.*s\"\nshould have been used.  However, it is in general preferable to escape\ncontrol characters while printf user data.\n\nReported-by: Hanno Böck\nSigned-off-by: Werner Koch <wk@gnupg.org>\n\n(backported from commit 596ae9f5433ca3b0e01f7acbe06fd2e424c42ae8)","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/1f9dfe1fedad215140011257d9b1bb21bc368179"},{"sha":"48085fe881ea593ac30eaac150378ea6510ffe4e","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"po: Convert es.po to utf-8\n\n--","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/48085fe881ea593ac30eaac150378ea6510ffe4e"},{"sha":"a0459db92329ff178fb8ae3fe804917abd3a7be1","author":{"email":"dfee7978d2c0dce40f6f4aba7cf1c8bd4fa506af@openmailbox.org","name":"Manuel \"Venturi\" Porras Peralta"},"message":"po: Update es.po\n\n--","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/a0459db92329ff178fb8ae3fe804917abd3a7be1"},{"sha":"0f429d553926b49c7851efd4d73ef631e93bdda4","author":{"email":"d2545f4f231c5ee12c0323ba407d7abcc5d0de2a@yucom.be","name":"Frans Spiesschaert"},"message":"po: New Dutch translation\n\n* po/LINGUAS: Add nl.po.\n--\nDebian-Bug-Id: 770981","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/0f429d553926b49c7851efd4d73ef631e93bdda4"},{"sha":"2edf8578220d94ef00215048dbef44019c6bb193","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"po: Convert pl.po to utf-8\n\n--","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/2edf8578220d94ef00215048dbef44019c6bb193"},{"sha":"d53d46b99c66d05b051bd07e8741e989e1463aad","author":{"email":"80922273e7082a040079eb65b6b86e09d22d2e2c@pld-linux.org","name":"Jakub Bogusz"},"message":"po: Update pl.po\n\n--","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/d53d46b99c66d05b051bd07e8741e989e1463aad"},{"sha":"d084ae8f5302cd4fdcb658179602742847fb468a","author":{"email":"023cebbf81cc5b0c9cee280b478243c29ea1e7c3@gnu.org","name":"Ineiev"},"message":"po: Update Russian translation","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/d084ae8f5302cd4fdcb658179602742847fb468a"},{"sha":"445eabf8f78ec349ba90b38a969b056afb901b11","author":{"email":"195bedbd58338851c648c7807569f1221cdcae8c@Jedi.org","name":"Jedi Lin"},"message":"po: Update Chinese (traditional) translation","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/445eabf8f78ec349ba90b38a969b056afb901b11"},{"sha":"e8c3fa77486d162bc63592e87680a82c9810ba48","author":{"email":"8d0c4f5442cf9498d238d9385d37043f3d369145@ukr.net","name":"Yuri Chornoivan"},"message":"po: Update Ukrainian translation","distinct":true,"url":"https://api.github.com/repos/sunny256/gnupg/commits/e8c3fa77486d162bc63592e87680a82c9810ba48"}]}