Maniphest T7530

Release GnuPG 2.5.5
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• werner
	Feb 12 2025, 11:56 AM

Tags

Subscribers

Description

Noteworthy changes in version 2.5.5 (2025-03-07)

gpg: Fix a verification DoS due to a malicious subkey in the keyring. [T7527]
dirmngr: Fix possible hangs due to blocking connection requests. [T6606, T7434]
w32: On socket nonce mismatch close the socket. [T7434]
w32: Print more detailed diagnostics for IPC errors.
GPGME is not any more distributed with the Windows installer. Please install gpg4win to get gpgme version.

(prev: T7480 next: T7586)/

Details

External Link: https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html

Related Objects

Mentioned In: T7586: Release GnuPG 2.5.6
T7480: Release GnuPG 2.5.4
Mentioned Here: T7586: Release GnuPG 2.5.6
T6606: Use new API of libassuan 3
T7434: Kleopatra: Initial keylisting hangs for ~60 seconds (gpg-agent: Socket ...S.gpg-agent cannot be bound)
T7527: Keyring/keybox denial of service
T7480: Release GnuPG 2.5.4

Event Timeline

• werner triaged this task as Normal priority.Feb 12 2025, 11:56 AM

• werner created this task.

• werner created this object with edit policy "Administrators".

• werner mentioned this in T7480: Release GnuPG 2.5.4.Feb 12 2025, 12:01 PM

• werner updated the task description. (Show Details)Fri, Mar 7, 3:09 PM

• werner closed this task as Resolved.Fri, Mar 7, 3:37 PM

• werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html.

• werner mentioned this in T7586: Release GnuPG 2.5.6.Tue, Mar 25, 9:35 AM

• werner updated the task description. (Show Details)