Page MenuHome GnuPG
Feed All Stories

May 26 2025

werner closed T7662: GPG's uncompress_ecc_q_in_canon_sexp reads past a constant string into rodata as Resolved.

Fixed in all branches but there is no potential for exploiting. See also gnupg-devel@ ML.

May 26 2025, 6:16 PM · Bug Report
werner edited projects for T7663: Certificated signed using SHA-1 isn't trusted, but needs --force-sign-key to re-sign., added: Feature Request, gnupg26, gnupg24; removed Bug Report.
May 26 2025, 6:08 PM · gnupg24, gnupg26, Feature Request
werner triaged T7663: Certificated signed using SHA-1 isn't trusted, but needs --force-sign-key to re-sign. as Low priority.

This should do the trick (master) but have not yet tested it:

May 26 2025, 6:07 PM · gnupg24, gnupg26, Feature Request
ikloecker moved T7666: Kleopatra: Rework versioning from Backlog to WIP on the gpd5x board.
May 26 2025, 5:13 PM · test on hold, gpd5x, kleopatra
ikloecker committed rMTP430e80104af3: Add translations used for Gpg4win 4.4.1 (authored by ikloecker).
Add translations used for Gpg4win 4.4.1
May 26 2025, 4:55 PM
ikloecker committed rKLEOPATRA1aa33a7bb950: Add translations used for Gpg4win 4.4.1 (authored by ikloecker).
Add translations used for Gpg4win 4.4.1
May 26 2025, 4:54 PM
ikloecker committed rLIBKLEOcacbddd9b390: Add translations used for Gpg4win 4.4.1 (authored by ikloecker).
Add translations used for Gpg4win 4.4.1
May 26 2025, 4:53 PM
ikloecker committed rKLEOPATRAdfdbab94165d: Make use of new CreationFlags and new QuickJob API (authored by ikloecker).
Make use of new CreationFlags and new QuickJob API
May 26 2025, 3:46 PM
ikloecker committed rKLEOPATRAf7da5917822f: Allow customization of full version info shown in About window (authored by ikloecker).
Allow customization of full version info shown in About window
May 26 2025, 3:46 PM
ikloecker committed rKLEOPATRA8323f1bb01c1: Remove customization of RELEASE_SERVICE_VERSION (authored by ikloecker).
Remove customization of RELEASE_SERVICE_VERSION
May 26 2025, 3:46 PM
ikloecker updated the task description for T7666: Kleopatra: Rework versioning.
May 26 2025, 11:09 AM · test on hold, gpd5x, kleopatra
ikloecker updated the task description for T7666: Kleopatra: Rework versioning.
May 26 2025, 11:05 AM · test on hold, gpd5x, kleopatra
ikloecker closed T7665: gpgmepp GIT head build-error as Resolved.

Fixed. Thanks for the report!

May 26 2025, 10:18 AM · gpgmepp, Bug Report
ikloecker triaged T7666: Kleopatra: Rework versioning as Normal priority.
May 26 2025, 10:18 AM · test on hold, gpd5x, kleopatra
ikloecker committed rGPGMEPP67abbf811080: Fix wrong definition of operator<<(std::ostream &, const Error &) (authored by ikloecker).
Fix wrong definition of operator<<(std::ostream &, const Error &)
May 26 2025, 10:05 AM
ikloecker claimed T7665: gpgmepp GIT head build-error.
May 26 2025, 9:43 AM · gpgmepp, Bug Report
CarlSchwan committed rW0c7129e857eb: Backport gpgmepp/qgpgme patches for reencrypt feature (authored by CarlSchwan).
Backport gpgmepp/qgpgme patches for reencrypt feature
May 26 2025, 9:33 AM
werner added a comment to rG0c7e7ec0c846: gpg: Fix ECC_POINT_LEN_MAX to allow NIST curves..

The classic NIST P521 pitfall ;-)

May 26 2025, 9:32 AM
ikloecker committed rGPGMEQT7e8932469e1d: Sort includes and macro invocations alphabetically (authored by ikloecker).
Sort includes and macro invocations alphabetically
May 26 2025, 9:28 AM
ikloecker committed rGPGMEQT433e40765dfc: Explicitly define constructor and destructor of some Job classes (authored by ikloecker).
Explicitly define constructor and destructor of some Job classes
May 26 2025, 9:28 AM
ikloecker committed rGPGMEQT056567525fb9: Add d-pointer to Job class (authored by ikloecker).
Add d-pointer to Job class
May 26 2025, 9:28 AM
ikloecker committed rGPGMEQT978f1d1efcf9: doc: Update NEWS (authored by ikloecker).
doc: Update NEWS
May 26 2025, 9:28 AM
gniibe added a parent task for T5964: gnupg should use the KDFs implemented in libgcrypt: T7649: gnupg: Use KEM interface for encryption/decryption.
May 26 2025, 6:34 AM · gnupg26, FIPS, Feature Request
gniibe added a subtask for T7649: gnupg: Use KEM interface for encryption/decryption: T5964: gnupg should use the KDFs implemented in libgcrypt.
May 26 2025, 6:34 AM · gnupg26
gniibe added a parent task for T7014: agent: Enhancement of PKDECRYPT for KEM interface: T7649: gnupg: Use KEM interface for encryption/decryption.
May 26 2025, 6:33 AM · gnupg26, gpgagent, Feature Request
gniibe added a subtask for T7649: gnupg: Use KEM interface for encryption/decryption: T7014: agent: Enhancement of PKDECRYPT for KEM interface.
May 26 2025, 6:33 AM · gnupg26
gniibe changed the status of T5964: gnupg should use the KDFs implemented in libgcrypt, a subtask of T6191: FIPS: Supporting running FIPS enabled machine, from Open to Testing.
May 26 2025, 6:32 AM · gnupg24, FIPS, Bug Report
gniibe changed the status of T5964: gnupg should use the KDFs implemented in libgcrypt from Open to Testing.

Done by T7649: gnupg: Use KEM interface for encryption/decryption

May 26 2025, 6:32 AM · gnupg26, FIPS, Feature Request
gniibe committed rG0c7e7ec0c846: gpg: Fix ECC_POINT_LEN_MAX to allow NIST curves. (authored by gniibe).
gpg: Fix ECC_POINT_LEN_MAX to allow NIST curves.
May 26 2025, 4:34 AM
gniibe added a comment to T7664: tests/openpgp/ecc.scm fails when building GPG with address sanitizer.

Thank you.

May 26 2025, 4:32 AM · gnupg, Bug Report
l10n daemon script <scripty@kde.org> committed rKLEOPATRA7af8cd7655d6: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 26 2025, 3:42 AM
gniibe claimed T7664: tests/openpgp/ecc.scm fails when building GPG with address sanitizer.
May 26 2025, 1:54 AM · gnupg, Bug Report

May 25 2025

ametzler1 created T7665: gpgmepp GIT head build-error.
May 25 2025, 2:34 PM · gpgmepp, Bug Report
l10n daemon script <scripty@kde.org> committed rMTPa7ce69842629: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 6:01 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO2e09d1a7bbdd: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 6:01 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA2f3d1032ca11: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 5:59 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA7529ce94d597: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
May 25 2025, 5:44 AM
l10n daemon script <scripty@kde.org> committed rMTP94ea410afd87: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 4:00 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO3e967b1e3248: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 3:59 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA0bef69972bd0: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2025, 3:57 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRAcfdcccdfdf41: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
May 25 2025, 3:35 AM
ukleinek added a comment to T7663: Certificated signed using SHA-1 isn't trusted, but needs --force-sign-key to re-sign..

Maybe related:

May 25 2025, 12:08 AM · gnupg24, gnupg26, Feature Request

May 24 2025

collinfunk added a comment to T7649: gnupg: Use KEM interface for encryption/decryption.

@werner I think these changes caused an ASAN failure that I reported in T7664. I think it would be good to get that sorted before a release.

May 24 2025, 9:13 PM · gnupg26
collinfunk created T7664: tests/openpgp/ecc.scm fails when building GPG with address sanitizer.
May 24 2025, 9:10 PM · gnupg, Bug Report
ukleinek created T7663: Certificated signed using SHA-1 isn't trusted, but needs --force-sign-key to re-sign..
May 24 2025, 7:53 PM · gnupg24, gnupg26, Feature Request
werner committed rGf3dfbe3fcdc0: common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp.
May 24 2025, 1:33 PM
werner committed rG14383ff052ff: gpgsm: Make use of the de-vs flag in the trustlist.txt. (authored by werner).
gpgsm: Make use of the de-vs flag in the trustlist.txt.
May 24 2025, 1:33 PM
werner committed rG01cb3ba62d77: common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp.
May 24 2025, 1:30 PM
werner committed rG57c1c96e7f5c: common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp.
May 24 2025, 1:30 PM
werner committed rMe763305ff1ce: Fix an include guard. (authored by werner).
Fix an include guard.
May 24 2025, 1:26 PM
collinfunk created T7662: GPG's uncompress_ecc_q_in_canon_sexp reads past a constant string into rodata.
May 24 2025, 8:46 AM · Bug Report
l10n daemon script <scripty@kde.org> committed rKLEOPATRA4a54c0f0c558: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 24 2025, 3:42 AM
collinfunk added a comment to rMd7267db472a4: Refactor gpgme-json for future re-use..

Hi Werner, one minor issue in this commit as can be seen by the following GCC warnings:

May 24 2025, 2:34 AM

May 23 2025

timegrid committed rGPGPASS6425b2b8108e: Add testenv start.sh user home tab (authored by timegrid).
Add testenv start.sh user home tab
May 23 2025, 3:11 PM
timegrid committed rGPGPASS61c8f8d683bf: Add testdata for sort order (authored by timegrid).
Add testdata for sort order
May 23 2025, 3:11 PM
timegrid committed rGPGPASSdc71bcf86c26: Add testdata for custom word lists (authored by timegrid).
Add testdata for custom word lists
May 23 2025, 3:11 PM
timegrid committed rGPGPASSf55e01a2acd9: Add gpgpass version in testenv start script (authored by timegrid).
Add gpgpass version in testenv start script
May 23 2025, 3:11 PM
timegrid committed rGPGPASS4abefea960ba: Add testdata encrypted for all/valid certs (authored by timegrid).
Add testdata encrypted for all/valid certs
May 23 2025, 3:11 PM
timegrid committed rGPGPASSf0f73aea28f1: Rename teststore gpgid entries (authored by timegrid).
Rename teststore gpgid entries
May 23 2025, 3:11 PM
timegrid committed rGPGPASSddaf99dadecd: Ensure testenv and testuser are valid in start script (authored by timegrid).
Ensure testenv and testuser are valid in start script
May 23 2025, 3:11 PM
timegrid committed rGPGPASS12be127128f6: Use keyids instead of fprs for teststore data (authored by timegrid).
Use keyids instead of fprs for teststore data
May 23 2025, 3:11 PM
timegrid committed rGPGPASS40179bf37fda: Add testdata for symlinks to subfolders of other stores (authored by timegrid).
Add testdata for symlinks to subfolders of other stores
May 23 2025, 3:11 PM
timegrid committed rGPGPASS084bde1e73f2: Add empty folders in testdata (authored by timegrid).
Add empty folders in testdata
May 23 2025, 3:11 PM
timegrid committed rGPGPASSa3895497ef85: Change testenv shortcuts (authored by timegrid).
Change testenv shortcuts
May 23 2025, 3:10 PM
timegrid committed rGPGPASSd25fbb4f6403: Use custom tmp folder for testdata example outside store root (authored by timegrid).
Use custom tmp folder for testdata example outside store root
May 23 2025, 3:10 PM
timegrid committed rGPGPASSeeede8f4cfae: Fixes another wrong teststore path (authored by timegrid).
Fixes another wrong teststore path
May 23 2025, 3:10 PM
timegrid committed rGPGPASSdb287f4ca465: Change to absolute teststore paths (authored by timegrid).
Change to absolute teststore paths
May 23 2025, 3:10 PM
timegrid committed rGPGPASS31e3b95d2886: Fixes wrong teststore path (authored by timegrid).
Fixes wrong teststore path
May 23 2025, 3:10 PM
timegrid committed rGPGPASSceaa8f9971d2: Adjust teststore configs to use relative paths (authored by timegrid).
Adjust teststore configs to use relative paths
May 23 2025, 3:10 PM
timegrid committed rGPGPASSe1e99820736e: Add testdata/-envs generation scripts (authored by timegrid).
Add testdata/-envs generation scripts
May 23 2025, 3:10 PM
timegrid committed rGPGPASS13280982a397: Adjust teststore template config (authored by timegrid).
Adjust teststore template config
May 23 2025, 3:10 PM
werner committed rM66de35a9b117: json: Fix minor memory leak. (authored by werner).
json: Fix minor memory leak.
May 23 2025, 3:09 PM
werner committed rMd7267db472a4: Refactor gpgme-json for future re-use. (authored by werner).
Refactor gpgme-json for future re-use.
May 23 2025, 3:09 PM
timegrid updated the task description for T7578: gpgpass: test feedback collection.
May 23 2025, 2:39 PM · gpd5x, gpgpass
werner closed T7506: GnuPG: Error when adding ECDSA subkey in batch mode with quick-add-key "Wrong key usage" as Resolved.
May 23 2025, 11:59 AM · gnupg26, gnupg24, Bug Report
werner closed T7428: Release GnuPG 2.4.8 as Resolved.
May 23 2025, 11:58 AM · gnupg, Release Info
ebo closed T5982: GpgOL: More fine grained discovery of content-id / embedded parts as Resolved.

was fixed in gpgol 2.5.15

May 23 2025, 11:50 AM · Restricted Project, gpgol
gniibe added a comment to T7649: gnupg: Use KEM interface for encryption/decryption.

Clean up finished by rG681d75404300: gpg,agent: Clean up around using ECC KEM.
Tested by make check and decrypting tests/openpgp/samplemsgs/pqc-sample-*.enc.asc.

May 23 2025, 10:27 AM · gnupg26
gniibe committed rG681d75404300: gpg,agent: Clean up around using ECC KEM. (authored by gniibe).
gpg,agent: Clean up around using ECC KEM.
May 23 2025, 10:21 AM
gniibe committed rG37bec0df7bf1: common: Fix argument name of gnupg_ecc_kem_kdf. (authored by gniibe).
common: Fix argument name of gnupg_ecc_kem_kdf.
May 23 2025, 10:21 AM
gniibe closed T7457: gpg --full-gen-key doesn't show list of keys on card (regression) as Resolved.
May 23 2025, 10:18 AM · gnupg26, gnupg24, Bug Report
ebo moved T7600: Kleopatra: gpg.exe hangs on trying to exportably certify an already locally signed certificate with multiple UIDs from Restricted Project Column to Restricted Project Column on the Restricted Project board.
May 23 2025, 10:14 AM · Restricted Project, vsd33 (vsd-3.3.1), gpgme, gpd5x, kleopatra
ebo added a project to T7600: Kleopatra: gpg.exe hangs on trying to exportably certify an already locally signed certificate with multiple UIDs: Restricted Project.
May 23 2025, 10:13 AM · Restricted Project, vsd33 (vsd-3.3.1), gpgme, gpd5x, kleopatra
l10n daemon script <scripty@kde.org> committed rMTP6fbf3a1d4ffa: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2025, 3:50 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA4ef7d3eb7429: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2025, 3:44 AM

May 22 2025

CarlSchwan committed rOJ3397b8ab0ada: reencrypt: First copy them email and then edit the copy (authored by CarlSchwan).
reencrypt: First copy them email and then edit the copy
May 22 2025, 6:41 PM
CarlSchwan committed rOJ8cc6c1428366: Ifdef gpgme feature (authored by CarlSchwan).
Ifdef gpgme feature
May 22 2025, 6:41 PM
CarlSchwan committed rOJdc40acb9dc10: client: use std::make_shared when possible (authored by CarlSchwan).
client: use std::make_shared when possible
May 22 2025, 6:41 PM
ebo updated the task description for T7579: Kleopatra: improve menu items.
May 22 2025, 5:44 PM · kleopatra, gpd5x
alexk added projects to T6727: GpgEX: Unicode in file or foldername causes error: gpd5x, Windows.
May 22 2025, 5:24 PM · Windows, gpd5x, gpgex
alexk merged T7661: GpgEX: encrypting a file with umlaut in the name results in an error into T6727: GpgEX: Unicode in file or foldername causes error.
May 22 2025, 5:22 PM · Windows, gpd5x, gpgex
alexk merged task T7661: GpgEX: encrypting a file with umlaut in the name results in an error into T6727: GpgEX: Unicode in file or foldername causes error.
May 22 2025, 5:22 PM · Windows, Bug Report, gpgex
alexk created T7661: GpgEX: encrypting a file with umlaut in the name results in an error.
May 22 2025, 5:12 PM · Windows, Bug Report, gpgex
ebo removed a project from T7448: Draft: Kleopatra: Unify the information given on certificate import: gpd5x.
May 22 2025, 4:33 PM · kleopatra
ebo closed T7448: Draft: Kleopatra: Unify the information given on certificate import as Wontfix.

In light of the ticket T7630 this one is obsolete

May 22 2025, 3:53 PM · kleopatra
ebo renamed T7503: Kleopatra: change to secret key import window from Kleopatra: change secret key import behavior when importing more than one to Kleopatra: change to secret key import window.
May 22 2025, 3:50 PM · gpd5x, kleopatra
ebo renamed T7503: Kleopatra: change to secret key import window from Draft: Kleopatra: change secret key import behavior when importing more than one to Kleopatra: change secret key import behavior when importing more than one.
May 22 2025, 3:49 PM · gpd5x, kleopatra
ebo added a comment to T7503: Kleopatra: change to secret key import window.

We decided to

  • remove the "Cancel" Button in case only one secret key is imported (as this does the same as "No")
  • in case of importing more than one secret key we want to change the text from "Cancel" to "No for all".
May 22 2025, 3:47 PM · gpd5x, kleopatra
ebo added a comment to T7630: Kleopatra: Get rid of the imported certificates tabs.

When you've implemented the link solution here, do the same for T5006

May 22 2025, 3:37 PM · kleopatra, gpd5x
ebo added a project to T5006: Kleopatra: Display Names and Key-IDs for certificates after any attempt to import them.: gpd5x.
May 22 2025, 3:35 PM · gpd5x, kleopatra, Feature Request