---
2.7.13:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2018-05-13
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Enforce MDC verification when decrypting PGP messages to mitigate EFAIL attacks (Immerda <admin@immerda.ch>).
    |+
2.7.12:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2018-05-13
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mjr] Fix detecting digest algo properly (Bug #14814).
2.7.11:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-10-20
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Improve S/MIME key details formatting.
2.7.10:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-09-19
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Correctly determine expiration dates of short living PGP keys.
2.7.9:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-06-22
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] More fixes for GnuPG 2 (Mathieu Parent <math.parent@gmail.com>).
    [jan] Remove dependency on openssl executable (Hadi Nategh <hnategh@gmail.com>).
2.7.8:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-05-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Detect unsupported GnuPG versions.
    [jan] Fix detection of new GnuPG API (Remi Collet <remi@remirepo.net>, PR #220).
2.7.7:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-05-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mjr] Correctly specify either sha-1 or sha-256 when signing a smime message.
    [jan] Support GnuPG 2.1+ too (Bug #14014).
2.7.6:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2017-04-04
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mjr] SECURITY: Fix remote code execution vulnerability (CVE-2017-7413, and CVE-2017-7414).
2.7.5:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-12-16
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix label for S/MIME Encrypted Key Usage attribute.
2.7.4:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-12-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mjr] Ensure version information is output in ASCII armored output.
    [jan] Fix parsing inline signed PGP messages with PHP 7+ (Bug #14352).
2.7.3:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-04-05
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Work around broken PGP key servers.
2.7.2:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-03-11
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix throwing exception if verifying a PGP signature failed.
2.7.1:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-03-08
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Greek translation (Limperis Antonis <limperis@cti.gr>).
    [jan] Try three times to retrieve public PGP if the keyserver pool contains broken servers.
2.7.0:
  api: 2.7.0
  state:
    release: stable
    api: stable
  date: 2016-02-01
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Add Horde_Crypt_Pgp::pgpPacketInformationMultiple() and Horde_Crypt_Pgp_Backend_Binary::packetInfoMultiple() (Request #13190).
    [jan] Fix retrieving PGP keys from the keyserver with certain HTTP client backends.
    [jan] Fix creating PGP keys with comments (Bug #14125).
    [jan] Mark PHP 7 as supported.
2.6.1:
  api: 2.6.0
  state:
    release: stable
    api: stable
  date: 2015-08-20
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mjr] Fix PHP 5.3 incompatibility (Bug #14090).
2.6.0:
  api: 2.6.0
  state:
    release: stable
    api: stable
  date: 2015-07-31
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Updated UK translation.
    [jan] Fix issues with certain locales like Turkish.
    [mms] Split gnupg command-line binary specific code out into a separate PGP backend driver.
    [mms] S/MIME encryption is now done only with AES (if using PHP 5.4+) or 3DES.
2.5.3:
  api: 2.5.0
  state:
    release: stable
    api: stable
  date: 2015-02-10
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Make all PGP features locale-independent.
2.5.2:
  api: 2.5.0
  state:
    release: stable
    api: stable
  date: 2014-12-29
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Fix parsing GPG packet information using the gnupg v2.1 binary.
2.5.1:
  api: 2.5.0
  state:
    release: stable
    api: stable
  date: 2014-11-18
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix using non-deprecated Content-Type for encrypted messages (Bug #13659).
2.5.0:
  api: 2.5.0
  state:
    release: stable
    api: stable
  date: 2014-07-01
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Fix reference to constant outside of the package.
2.4.3:
  api: 2.4.0
  state:
    release: stable
    api: stable
  date: 2014-05-21
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Hungarian translation (Andras Galos <galosa@netinform.hu>).
2.4.2:
  api: 2.4.0
  state:
    release: stable
    api: stable
  date: 2014-04-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Korean translation (Deokgon Kim <dgkim@dgkim.net>).
2.4.1:
  api: 2.4.0
  state:
    release: stable
    api: stable
  date: 2014-03-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Ensure that all text parts are Q-P encoded when signing a MIME part.
    [mms] More efficient parsing in Horde_Crypt_Pgp_Parse.
2.4.0:
  api: 2.4.0
  state:
    release: stable
    api: stable
  date: 2013-11-19
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Remove Horde_Crypt_Pgp#generateRevocation() (Bug #7375).
    [mms] Fix submitting PGP keys to a public keyserver (Bug #10931).
    [mms] PGP keyserver code now uses Horde_Http_Client to connect to the keyserver.
    [mms] Move PGP keyserver code to a separate Horde_Crypt_Pgp_Keyserver class.
    [mms] Add Horde_Crypt_Pgp_Parse#parseToPart().
    [mms] Move Horde_Crypt_Pgp#parsePGPData() to separate class (Horde_Crypt_Pgp_Parse), since it can be used even if GnuPG binary is not available.
2.3.0:
  api: 2.3.0
  state:
    release: stable
    api: stable
  date: 2013-11-12
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Horde_Crypt_Pgp#parsePGPData() now accepts a Horde_Stream object as an argument.
2.2.2:
  api: 2.2.0
  state:
    release: stable
    api: stable
  date: 2013-08-27
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix detecting bad PGP signatures on some systems with non-English locales (Bug #10273).
2.2.1:
  api: 2.2.0
  state:
    release: stable
    api: stable
  date: 2013-06-26
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] SECURITY: Fix XSS vulnerability in Horde_Crypt_Smime#certToHTML() (João Machado <geral@jpaulo.eu>).
2.2.0:
  api: 2.2.0
  state:
    release: stable
    api: stable
  date: 2013-05-06
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Fix Horde_Crypt_Pgp#encryptedSymmetrically() from entering an infinite loop when using GnuPg v2.
    [mms] Improve security in PGP key generation (Request #12099).
2.1.3:
  api: 1.2.0
  state:
    release: stable
    api: stable
  date: 2013-03-05
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Change default keyserver to pool.sks-keyservers.net.
    [jan] Fix finding key ID for an email address on a keyserver (o@immerda.ch).
2.1.2:
  api: 1.2.0
  state:
    release: stable
    api: stable
  date: 2013-01-29
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update French translation (Paul De Vlieger <paul.de_vlieger@moniut.univ-bpclermont.fr>).
2.1.1:
  api: 1.2.0
  state:
    release: stable
    api: stable
  date: 2013-01-09
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Basque translation (Ibon Igartua <ibon.igartua@ehu.es>).
2.1.0:
  api: 1.2.0
  state:
    release: stable
    api: stable
  date: 2012-11-06
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Dutch translation (Arjen de Korte <build+horde@de-korte.org>).
    [mms] Add Horde_Crypt_Pgp#getPublicKeyFromPrivateKey().
2.0.0:
  api: 1.1.0
  state:
    release: stable
    api: stable
  date: 2012-10-30
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First stable release for Horde 5.
2.0.0RC1:
  api: 1.1.0
  state:
    release: beta
    api: stable
  date: 2012-10-26
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Throw exception if parsing of S/MIME certificates fails (Bug #11530).
2.0.0beta2:
  api: 1.1.0
  state:
    release: beta
    api: stable
  date: 2012-08-29
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Improvements in obtaining GPG keys from a keyserver (Bug #11380) (o+horde@immerda.ch).
2.0.0beta1:
  api: 1.1.0
  state:
    release: beta
    api: stable
  date: 2012-07-19
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First beta release for Horde 5.
2.0.0alpha1:
  api: 1.1.0
  state:
    release: alpha
    api: stable
  date: 2012-07-05
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First alpha release for Horde 5.
1.1.3:
  api: 1.1.0
  state:
    release: stable
    api: stable
  date: 2012-05-01
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Throw exception if parsing of S/MIME certificates fails (Bug #11530).
    [mms] Improvements in obtaining GPG keys from a keyserver (Bug #11380) (o+horde@immerda.ch).
1.1.2:
  api: 1.1.0
  state:
    release: stable
    api: stable
  date: 2012-05-01
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix HTML rendering of S/MIME certificates with multi-value attributes.
1.1.1:
  api: 1.1.0
  state:
    release: stable
    api: stable
  date: 2012-02-22
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Improved parsing of S/MIME certificate information (Bug #10956).
    [mms] Silently ignore unknown data when parsing S/MIME certificates.
1.1.0:
  api: 1.1.0
  state:
    release: stable
    api: stable
  date: 2011-12-13
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Provide signature information when decrypting a message, rather than just a boolean result.
    [mms] Fix displaying PGP key expiration information.
    [mms] Allow expiration date to be given to Horde_Crypt_Pgp#generateKey() (Request #5754).
1.0.6:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-11-22
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Croatian translation.
    [jan] Update Estonian translation.
    [mms] Upgrade signed S/MIME output to comply with S/MIME version 3.2.
1.0.5:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-08-17
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [mms] Encrypted data is already base64 encoded (Bug #10285).
1.0.4:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-07-27
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Update Latvian translation.
    [jan] Allow to specify body charset when verifying PGP signed messages.
    [jan] Update Lithuanian translation.
    [jan] Update Brazilian Portuguese translation.
    [mms] Use strongest cipher possible when encrypting S/MIME data (Request #10246).
1.0.3:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-06-01
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Updated Slovak translation.
1.0.2:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-05-18
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Updated Spanish translation.
1.0.1:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-04-20
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    [jan] Fix package.xml syntax.
1.0.0:
  api: 1.0.0
  state:
    release: stable
    api: stable
  date: 2011-04-06
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First stable release for Horde 4.
1.0.0RC2:
  api: 1.0.0
  state:
    release: beta
    api: beta
  date: 2011-03-29
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    Second release candidate for Horde 4.
1.0.0RC1:
  api: 1.0.0
  state:
    release: beta
    api: beta
  date: 2011-03-22
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First release candidate for Horde 4.
1.0.0beta1:
  api: 1.0.0
  state:
    release: beta
    api: beta
  date: 2011-03-16
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First beta release for Horde 4.
1.0.0alpha1:
  api: 1.0.0
  state:
    release: alpha
    api: alpha
  date: 2011-03-08
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    First alpha release for Horde 4.
    Add Horde_Crypt_Exception.
    Better error handling for gnupg and openssl command line binaries.
0.0.2:
  api: 0.0.2
  state:
    release: alpha
    api: alpha
  date: 2006-05-08
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    Converted to package.xml 2.0 for pear.horde.org
    Added support for email addresses in subjectAltName of S/MIME certs (Bug #5986)
    Improved support for PGP fingerprints (Bug #6363)
0.0.1:
  api: 0.0.1
  state:
    release: alpha
    api: alpha
  date: 2003-07-03
  license:
    identifier: LGPL-2.1
    uri: http://www.horde.org/licenses/lgpl21
  notes: |
    Initial release as a PEAR package
