I do not see this in Gpg4win 5.0.2. For me the result is "unknown host" without the beta compliance for one of the certificates, "invalid CRL object" for the other.
Today
Today
• ebo added a comment to T8234: Kleopatra: Creating S/MIME encrypted archive of multiple files for certificate with bad CRL fails with input/output error.
GnuPG 2.5.19 announcement
swdb: GnuPG 2.5.19
Post release updates
po: msgmerge
Release 2.5.19
po: Update German translation
indent: Re-align check_key_signature2
• werner updated the task description for T7998: Release GnuPG 2.5.19.
mlaurent committed rLIBKLEO4a32197e0f19: QUrlQuery already includes QUrl include (authored by mlaurent).
QUrlQuery already includes QUrl include
Post release updates
Release 1.60
po: msgmerge
po: Update German translation
swdb: gpgrt 1.60
• werner updated the task description for T8112: Release GpgRT 1.60.
• gniibe added a comment to T8048: Keyboxd: S/MIME certificate is imported on ldap search.
I created a branch https://dev.gnupg.org/source/gnupg/history/gniibe%252Ft8048 and pushed all changes (including keyboxd-patch-2026-04-23).
l10n daemon script <scripty@kde.org> committed rMTP86d58d554d5c: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRAc1ce264b925c: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Yesterday
Yesterday
Volker Krause <vkrause@kde.org> committed rKLEOPATRA098d18c43a5e: Add forward compatibility with KMime from KDE Frameworks (authored by Volker Krause <vkrause@kde.org>).
Add forward compatibility with KMime from KDE Frameworks
tfry committed rOJ5b705248fdec: Allow to customize key(s) to use for encrypt to self (authored by tfry).
Allow to customize key(s) to use for encrypt to self
Also remember size of reader windows
Add signing action to main toolbar
Remember size of composer windows
• werner committed rM63f18298d3f5: New decryption flag GPGME_DECRYPT_SESSION_HASH. (authored by • werner).
New decryption flag GPGME_DECRYPT_SESSION_HASH.
indent: Align a debug output.
• werner committed rGecd0f7afa1cf: gpg: New options --show-session-hash and --show-only-session-hash. (authored by • werner).
gpg: New options --show-session-hash and --show-only-session-hash.
• werner committed rKc8df64fe11e8: crl: Fix minor memory leak in case of a corrupt DER structure. (authored by • werner).
crl: Fix minor memory leak in case of a corrupt DER structure.
• gniibe added a comment to T8048: Keyboxd: S/MIME certificate is imported on ldap search.
Enhance keyboxd to have new command for what keybox_set_flags does.
l10n daemon script <scripty@kde.org> committed rMTPebd89f059857: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTPff369bab983e: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRAfc5e23c59a16: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
kbx: Fix keybox format comment.
Wed, Apr 22
Wed, Apr 22
Volker Krause <vkrause@kde.org> committed rMTP690a45a45f39: Add forward compatibility with KMime from KDE Frameworks (authored by Volker Krause <vkrause@kde.org>).
Add forward compatibility with KMime from KDE Frameworks
tfry moved T8175: Improvements to key handling / selection in composer window from Backlog to WiP on the gpgol2 board.
tfry updated the task description for T8175: Improvements to key handling / selection in composer window.
tfry moved T8175: Improvements to key handling / selection in composer window from WiP to Backlog on the gpgol2 board.
tfry moved T8175: Improvements to key handling / selection in composer window from Backlog to WiP on the gpgol2 board.
tfry updated the task description for T8175: Improvements to key handling / selection in composer window.
tfry committed rOJ2e172a0182a5: Allow to customize key(s) to use for encrypt to self (authored by tfry).
Allow to customize key(s) to use for encrypt to self
tfry committed rOJ1ef9f7c1469c: Allow to customize key(s) to use for encrypt to self (authored by tfry).
Allow to customize key(s) to use for encrypt to self
Show key ID along with validity information
• werner committed rG2ab4cba36ccd: dirmngr: New keyword "clear" for --keyserver. (authored by • werner).
dirmngr: New keyword "clear" for --keyserver.
tfry updated the task description for T8175: Improvements to key handling / selection in composer window.
tfry moved T7939: reencrypt: move cursor to next input field from Backlog to WiP on the gpgol2 board.
Improvements to (reencrypt) key selection UI
• werner added a comment to T8208: Missing bounds check in libgcrypt's Dilithium context handling.
FWIW: There is actually a problem in the reference code: Having a
fixed size buffer inside a function and allowing the caller to provide
content at arbitrary length is bad coding style because the caller
needs to know internals of the called function (in a different source
file).
• werner added a comment to T8211: Libgcrypt ECDH buffer overwrite with zeroes.
This is the original bug report to security at gnupg dated 2026-04-07:
• werner shifted T8211: Libgcrypt ECDH buffer overwrite with zeroes from the Restricted Space space to the S1 Public space.
• ebo triaged T8235: Kleopatra: Honor Windows setting to underline access key shortcuts (Breeze style) as Normal priority.
• ebo added a parent task for T8219: Kleopatra: Focus in tables is not visible: T7415: Kleopatra: Use Breeze style on Windows.
l10n daemon script <scripty@kde.org> committed rKLEOPATRAb84137f835ac: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Tue, Apr 21
Tue, Apr 21
• ikloecker committed rGPGMEPPf12b36209758: Add support for new flags of encryption results (authored by • ikloecker).
Add support for new flags of encryption results
• ikloecker changed the status of T6702: Kleopatra: Offer retry of S/MIME encryption if encryption failed with "not trusted", a subtask of T8193: Add a workflow to force encryption/signature with invalid or expired certificates, from Open to Testing.
• ikloecker changed the status of T6702: Kleopatra: Offer retry of S/MIME encryption if encryption failed with "not trusted" from Open to Testing.
Implemented for the Notepad and Sign/Encrypt Files. Can be tested with the certificates in T6702#216065.
• ikloecker committed rKLEOPATRA9d5f9d949e51: Offer encryption with lower security also for file encryption (authored by • ikloecker).
Offer encryption with lower security also for file encryption
• ikloecker committed rKLEOPATRA7a00b4f9fc19: Allow forcing encryption result as not compliant (authored by • ikloecker).
Allow forcing encryption result as not compliant
• ikloecker committed rKLEOPATRAf9bcab44418d: Allow clearing results shown on Sign/Encrypt Files dialog (authored by • ikloecker).
Allow clearing results shown on Sign/Encrypt Files dialog
• ikloecker committed rKLEOPATRA32d33377c7d3: Improve button updating on Sign/Encrypt Files dialog (authored by • ikloecker).
Improve button updating on Sign/Encrypt Files dialog
• ikloecker committed rM2100e1fbdfeb: Add flag fields is_de_vs and beta_compliance to encryption results (authored by • ikloecker).
Add flag fields is_de_vs and beta_compliance to encryption results
• ikloecker committed rM9d7093cb3375: doc: Fix argument type of gpgme_set_sender (authored by • ikloecker).
doc: Fix argument type of gpgme_set_sender
Announce libgcrypt 1.12.2 et al.
Release 1.10.4
Post release updates
• werner committed rC6da0152595aa: cipher:ecc: Fix decoding a point on Montgomery curve. (authored by • gniibe).
cipher:ecc: Fix decoding a point on Montgomery curve.
• werner updated the task description for T6817: Release Libgcrypt 1.10.3.
Post release updates
Release 1.11.3
• werner committed rC7aadca8dbabe: cipher:kem:ecc: Raise an error by validating a point on curve. (authored by • gniibe).
cipher:kem:ecc: Raise an error by validating a point on curve.
• werner committed rC8b3612d62a74: cipher:ecc: Fix decoding a point on Montgomery curve. (authored by • gniibe).
cipher:ecc: Fix decoding a point on Montgomery curve.
• ikloecker added a comment to T8215: Gpg4Win 5.0.2 fails to upgrade from 5.0.1 on Windows 11.
l10n daemon script <scripty@kde.org> committed rMTPa52a8a0f2543: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA81982c5becaf: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Mon, Apr 20
Mon, Apr 20
uwi added a comment to T8215: Gpg4Win 5.0.2 fails to upgrade from 5.0.1 on Windows 11.
• ikloecker committed rKLEOPATRA4bd7b9cf48f5: Make "Retry with Lower Security?" dialog reusable (authored by • ikloecker).
Make "Retry with Lower Security?" dialog reusable
• ikloecker committed rKLEOPATRA4d7f7cb63d54: GIT_SILENT Fix indentation and some other formatting (authored by • ikloecker).
GIT_SILENT Fix indentation and some other formatting
Post release updates
Release 2.2.54
po: msgmerge
Define make variable IS_VSD3_BUILD.
Release vsd 3.3.7
tfry committed rOJ01d6a3ad4dbe: Show i18n-able message, if email retrieval fails (authored by tfry).
Show i18n-able message, if email retrieval fails
tfry committed rOJ66bd564618ec: Reencrypt: Continue if retrieval of a message fails (authored by tfry).
Reencrypt: Continue if retrieval of a message fails
• werner committed rGed76d5e84c2b: dirmngr: New keyword "clear" for --keyserver. (authored by • werner).
dirmngr: New keyword "clear" for --keyserver.
l10n daemon script <scripty@kde.org> committed rMTP99f420550d10: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA21c7e61d5e43: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
• gniibe committed rG97c057ff4783: gpg,regexp: Fix REGEXP_PREFIX macro, expanded correctly. (authored by • gniibe).
gpg,regexp: Fix REGEXP_PREFIX macro, expanded correctly.