Dear maintainer,
I've prepared an NMU for alpine (versioned as 2.02+dfsg-1.1). The diff is attached to this message. Regards.
diff -Nru alpine-2.02+dfsg/debian/changelog alpine-2.02+dfsg/debian/changelog --- alpine-2.02+dfsg/debian/changelog 2012-07-03 00:49:33.000000000 +0100 +++ alpine-2.02+dfsg/debian/changelog 2012-09-08 16:07:59.000000000 +0100 @@ -1,3 +1,13 @@ +alpine (2.02+dfsg-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Apply upstream patch disabling DES-56 to ensure RFC 5751 compliance. + (Closes: #657046) + - Upstream commit e2eef589799d742ea6ccaec9144dc619a516222e added as + 70_des56_rfc5751.patch + + -- Jonathan McCrohan <[email protected]> Sat, 08 Sep 2012 16:07:59 +0100 + alpine (2.02+dfsg-1) unstable; urgency=medium * ACK'd non-maintainer upload by tolimar. (Thank you!) diff -Nru alpine-2.02+dfsg/debian/patches/70_des56_rfc5751.patch alpine-2.02+dfsg/debian/patches/70_des56_rfc5751.patch --- alpine-2.02+dfsg/debian/patches/70_des56_rfc5751.patch 1970-01-01 01:00:00.000000000 +0100 +++ alpine-2.02+dfsg/debian/patches/70_des56_rfc5751.patch 2012-09-08 16:03:36.000000000 +0100 @@ -0,0 +1,27 @@ +From e2eef589799d742ea6ccaec9144dc619a516222e Mon Sep 17 00:00:00 2001 +From: Unknown <[email protected]> +Date: Sun, 3 Jun 2012 11:59:09 +0200 +Subject: [PATCH] Update to RFC 5751 as per bug 3428168 + +--- + pith/smime.c | 4 +++- + 1 files changed, 3 insertions(+), 1 deletions(-) + +diff --git a/pith/smime.c b/pith/smime.c +index 55b2f3c..1e2ed8c 100644 +--- a/pith/smime.c ++++ b/pith/smime.c +@@ -1330,7 +1330,9 @@ encrypt_outgoing_message(METAENV *header, BODY **bodyP) + dprint((9, "encrypt_outgoing_message()")); + smime_init(); + +- cipher = EVP_des_cbc(); ++// cipher = EVP_des_cbc(); ++// AJB 20111025 - upgrade to 128 bit AES as per RFC5751 ++ cipher = EVP_aes_128_cbc(); + + encerts = sk_X509_new_null(); + +-- +1.7.4.1 + diff -Nru alpine-2.02+dfsg/debian/patches/series alpine-2.02+dfsg/debian/patches/series --- alpine-2.02+dfsg/debian/patches/series 2011-12-02 14:15:46.000000000 +0000 +++ alpine-2.02+dfsg/debian/patches/series 2012-09-08 16:09:09.000000000 +0100 @@ -8,3 +8,4 @@ 40_fix_filter_hardcoded_paths.patch 50_danchev_malloc_once.patch 60_fix_string_error.patch +70_des56_rfc5751.patch
