Your message dated Sun, 12 May 2013 04:48:11 +0000
with message-id <[email protected]>
and subject line Bug#691237: fixed in gnupg2 2.0.20-1
has caused the Debian Bug report #691237,
regarding fixed length for assuan messages is too short for 4096 decryption keys
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
691237: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691237
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libassuan0
Version: 2.0.3-1
Severity: important
Tags: upstream patch
I used a 4096bit key for encryption (using the GnuPG crypto-stick).
Encryption worked, but decryption didn't work (gpg2 didn't find
the secret key.)
gpg2 uses libassuan to talk to some daemons/agents.
gpg (1.x) worked, but only if there was no gnupg-agent running.
Patch:
http://lists.gnupg.org/pipermail/gnupg-users/2012-June/044868.html
I applied this patch and re-built libassuan0-* and gnupg2. This
seems to fix the issue.
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.5-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libassuan0 depends on:
ii libc6 2.13-35
ii libgpg-error0 1.10-3.1
ii multiarch-support 2.13-35
libassuan0 recommends no packages.
libassuan0 suggests no packages.
-- no debconf information
--- a/src/assuan.h.in
+++ b/src/assuan.h.in
@@ -67,7 +67,8 @@
#endif
-#define ASSUAN_LINELENGTH 1002 /* 1000 + [CR,]LF */
+/* see: http://lists.gnupg.org/pipermail/gnupg-users/2012-June/044868.html */
+#define ASSUAN_LINELENGTH 1076 /* 1074 + [CR,]LF */
struct assuan_context_s;
typedef struct assuan_context_s *assuan_context_t;
--- End Message ---
--- Begin Message ---
Source: gnupg2
Source-Version: 2.0.20-1
We believe that the bug you reported is fixed in the latest version of
gnupg2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Eric Dorland <[email protected]> (supplier of updated gnupg2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 11 May 2013 18:28:57 -0400
Source: gnupg2
Binary: gnupg-agent scdaemon gpgsm gnupg2
Architecture: source amd64
Version: 2.0.20-1
Distribution: unstable
Urgency: low
Maintainer: Eric Dorland <[email protected]>
Changed-By: Eric Dorland <[email protected]>
Description:
gnupg-agent - GNU privacy guard - password agent
gnupg2 - GNU privacy guard - a free PGP replacement (new v2.x)
gpgsm - GNU privacy guard - S/MIME version
scdaemon - GNU privacy guard - smart card support
Closes: 583893 691237
Changes:
gnupg2 (2.0.20-1) unstable; urgency=low
.
* New upstream release. (Closes: #691237, #583893)
* debian/patches/02-cve-2012-6085.diff: Remove, merged upstream.
* debian/control: Upgrade Standards-Version to 3.9.4.
* debian/compat, debian/control: Upgrade to debhelper v9.
* debian/control, debian/rules: Drop hardening-wrapper, now that we use
debhelper v9.
* debian/scdaemon.install: scdaemon has moved under $libexecdir.
* debian/control: Tighten dependency on scdaemon.
* debian/rules: Turn on all hardening options.
* debian/patches/01-gnupg2-rename.diff: Refresh patch.
* debian/gnupg-agent.install, debian/gnupg2.install,
debian/scdaemon.install: Fix /usr/lib paths for multi-arch.
* debian/rules: Pass ${pkglibdir} to --libexecdir since dh v9 passes
${libdir} by default.
Checksums-Sha1:
324119b0a3602164627fd4c9fd28fa69a9f3b4b2 1576 gnupg2_2.0.20-1.dsc
7ddfefa37ee9da89a8aaa8f9059d251b4cd02562 4286191 gnupg2_2.0.20.orig.tar.bz2
2623eb7e6fc556e915c46fea0a9b6348078fdab1 15355 gnupg2_2.0.20-1.debian.tar.bz2
3645562fab72037be28af9697304e205205210ba 465158 gnupg-agent_2.0.20-1_amd64.deb
8365862060fbc61ed4b678482b69ab61094767c3 222280 scdaemon_2.0.20-1_amd64.deb
5d5f53010d1c71e377044992d079311f7be9f67d 255710 gpgsm_2.0.20-1_amd64.deb
1d6a349a2e88d7486ad6418e0c4902767493b4f3 2402602 gnupg2_2.0.20-1_amd64.deb
Checksums-Sha256:
a8254f4bc41dc5db531a8fc9c1cce44134d65d7890cf9573b841ab24e2119ad8 1576
gnupg2_2.0.20-1.dsc
6e949b7f062cab8a3cf0910f91ecf04cabaad458c0aeeec66298651b8b04b79a 4286191
gnupg2_2.0.20.orig.tar.bz2
da6811a983e22524f8555bbbfce8920bfec08433a3a81c30b92785ca885fadff 15355
gnupg2_2.0.20-1.debian.tar.bz2
a264e1f0018409c50c61cccaba3dae2c6b6be4a03ccef4a53e46b232778a2641 465158
gnupg-agent_2.0.20-1_amd64.deb
2e7b6b4a8357c4ba56c8d65506803a8a35a322613791459a381ad2b907205663 222280
scdaemon_2.0.20-1_amd64.deb
e970f5c61af44ce35afc6aced2c00afa76e656caa1947b8084508d41da83fb8f 255710
gpgsm_2.0.20-1_amd64.deb
76b3f5a898c57e1d12cdbc19122312ce9baa139fc55d496cc67eb9b1dcb80c6f 2402602
gnupg2_2.0.20-1_amd64.deb
Files:
a62cb5086496c84bca5a312ed732167b 1576 utils optional gnupg2_2.0.20-1.dsc
9d18ee71bb0b10d40d1c8a393bdd7a89 4286191 utils optional
gnupg2_2.0.20.orig.tar.bz2
78ad4a5bdea2fb62faa0a4a4bcb14111 15355 utils optional
gnupg2_2.0.20-1.debian.tar.bz2
843c5d0d426091c098f9846d38fca9d1 465158 utils optional
gnupg-agent_2.0.20-1_amd64.deb
2e2f44f301b35a0ec2653942ff1f6a1f 222280 utils optional
scdaemon_2.0.20-1_amd64.deb
b37781967eac85ec19b3ee9f4d6b3d5d 255710 utils optional gpgsm_2.0.20-1_amd64.deb
1338efc08585040a468ed80e9f532632 2402602 utils optional
gnupg2_2.0.20-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlGPG4cACgkQYemOzxbZcMa5sACcC44edBjxF0wh/n+BPsFkpsD8
axEAoMNpyFhTHEgln75gjseuIzyVzTJ3
=AOWq
-----END PGP SIGNATURE-----
--- End Message ---
