Page MenuHome GnuPG
Create Task
Maniphest T6312

Although gnupg-2.2.41 ist released in GnuPG VS-Desktop 3.1.26 it is not available in Gpg4Win 3.1.26 and on git- and download-server.
Closed, InvalidPublic
Actions

Description

Hello ...

Noteworthy changes in version 2.2.41 (unreleased)

Version "gnupg-2.2.41" is already released in source- and binary-Packages of GnuPG VS-Desktop 3.1.26 (https://gnupg.com/vsd/version-3.1.26.html).

Currently as of December the 16th 2022, although "gnupg-2.2.41" ist released under "https://dev.gnupg.org/T6280" and was mentioned in "https://gnupg.com/vsd/version-3.1.26.html" (Versions of the Components) and ...

Gpg4Win 3.1.26: "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpg4win.git;a=blob_plain;f=NEWS;hb=refs/tags/gpg4win-3.1.26"
... it is not available under:

https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=shortlog;h=refs/tags/gnupg-2.2.41

Also, "gnupg-2.2.41" is not available under:

https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.2.41.tar.bz2
https://gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.41_20221209.tar.xz
https://gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.41_20221209.exe
https://gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.41_20221209.wixlib

... and the corresponding community-version "Gpg4Win 3.1.26" of "GnuPG VS-Desktop 3.1.26" does not list "gnupg-2.2.41" under its source-packages in ...

https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpg4win.git;a=blob_plain;f=packages/packages.3;hb=refs/tags/gpg4win-3.1.26

... here, only the old version "gnupg-2.2.40" ist listed, although mentioned in:

Gpg4Win 3.1.26 (NEWS): "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpg4win.git;a=blob_plain;f=NEWS;hb=refs/tags/gpg4win-3.1.26".

Best regards,
Veit Berwig

Event Timeline

vitusb created this task.Dec 16 2022, 2:13 PM
vitusb created this object in space S1 Public.
vitusb updated the task description. (Show Details)Dec 16 2022, 2:30 PM
• werner closed this task as Invalid.Dec 16 2022, 2:32 PM

We sometimes grant our customers the privilege of receiving updates a few days earlier than the community. It is not really helpful if you publish that fact anyway on a public tracker. BTW, there is no community version gpg4win 3.1.26.

• werner added a project: Responsible_Disclosure.Dec 16 2022, 2:39 PM
vitusb added a comment.EditedDec 16 2022, 2:55 PM

Hello ...

It is not really helpful if you publish that fact anyway on a public tracker.

Ok, excuse me. I was not aware an existing policy.

I had noticed that, contrary to the GnuPG versions specified in the release notes for Gpg4Win 3.1.26, the actually associated version 2.2.41 is not listed in the "packages.3" sources, but rather the outdated version gnupg-2.2.40 .

I thought this issue would be importtant and relevant, because no updated builts of Gpg4Win 3.1.26 are possible with this confguration ...

Also on the Git-server, Gpg4Win 3.1.26 has the status "This will be GnuPG VS-Desktop 3.1.26":
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpg4win.git;a=tag;h=dc489553fb44ab8a8183057fbf677d91e09e98fe

... so i think, this is a "release status" isn't it ?

Best regards,
anyway