Page MenuHome GnuPG
Feed Advanced Search

Nov 5 2025

werner committed rDf8bfcd81f653: New German ftp mirror wity rsync and Tor (authored by werner).
New German ftp mirror wity rsync and Tor
Nov 5 2025, 2:38 PM
werner committed rD660bf552f8e9: swdb: gpgol 2.6.9 (authored by werner).
swdb: gpgol 2.6.9
Nov 5 2025, 10:43 AM
werner committed rWbdfa016873eb: Update GpgOL to 2.6.9 (authored by werner).
Update GpgOL to 2.6.9
Nov 5 2025, 10:26 AM
werner committed rO935e6e03004d: Post release updates (authored by werner).
Post release updates
Nov 5 2025, 10:08 AM
werner committed rOf398ebd4aff1: Release 2.6.9 (authored by werner).
Release 2.6.9
Nov 5 2025, 10:08 AM

Nov 4 2025

werner triaged T7904: GnuPG may downgrade digest algorithm to SHA1 as High priority.
Nov 4 2025, 1:26 PM · gnupg, Bug Report
werner added a comment to T7903: Multiple Plaintext Attack on Detached PGP Signatures in GnuPG.

We have fixed it but the commit also states:

Nov 4 2025, 1:25 PM · Not A Bug, OpenPGP, gnupg
werner claimed T7901: Cleartext Signature Forgery in NotDashEscaped header implementation in GnuPG.

I agree because the original purpose from the 90ies to enable the use of signed patch files in the Linux kernel community was never actually used and GnuPG stopped the distribution of patches from version to version many years ago. Thus I agree we should hide this option behind a compatibility flag.

Nov 4 2025, 1:22 PM · gnupg, Bug Report
werner committed rG1b4ac98de7db: agent: Accept a trustlist with a missing LF at the end. (authored by werner).
agent: Accept a trustlist with a missing LF at the end.
Nov 4 2025, 9:32 AM

Nov 3 2025

werner triaged T7895: Kleopatra: Handbook outdated as Normal priority.
Nov 3 2025, 5:11 PM · Documentation, gpd5x, kleopatra
werner triaged T7881: Public key URL cannot be cleared on ZeitControl OpenPGP v3.4 card as Normal priority.
Nov 3 2025, 5:08 PM · gpd5x (gpd-5.0.0), kleopatra
werner triaged T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc as Normal priority.
Nov 3 2025, 4:47 PM · libgcrypt, scute, gpgrt, Bug Report
werner changed the status of T7897: Include key preferences in --with-colons from Open to Testing.

Will be in 2.5.14 but I am not yet sure whether or when we put support into gpgme

Nov 3 2025, 4:45 PM · Gentoo, Feature Request
werner committed rG8b44256a5549: gpg: Print new "pfc" record in --with-colons key listings. (authored by werner).
gpg: Print new "pfc" record in --with-colons key listings.
Nov 3 2025, 4:42 PM
werner added a comment to T7897: Include key preferences in --with-colons.

There will be a new "pfc" record to emit the used preferences after a "uid" record. --list-options show-pref must be given.

Nov 3 2025, 4:32 PM · Gentoo, Feature Request
werner triaged T7897: Include key preferences in --with-colons as Normal priority.
Nov 3 2025, 4:02 PM · Gentoo, Feature Request
werner added a comment to T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc.

For argparse we use /etc as a default but applications may use gpgrt_set_confdir to set a different one. Howeever if we already have a new get_sysconfdir function, it is easy and useful to change the default on Unix.

Nov 3 2025, 3:29 PM · libgcrypt, scute, gpgrt, Bug Report
werner added a comment to T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc.

In GnuPG we use CSIDL_COMMON_APPDATA and append "\GNU\etc\gnupg". If this can't be found we use the rootdir, that is he installation directory of the binary or one up if installed below a bin directory. The reason for using GNU and not POSIX or Unix is merely to avoid name clashes with other software ported to Windows. There was no real standard for this on Windows.

Nov 3 2025, 3:27 PM · libgcrypt, scute, gpgrt, Bug Report
werner added a comment to T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc.

We already did this for Libgcrypt 1.8 but take care that an installer includig Libgcrypt should run something like

Nov 3 2025, 3:05 PM · libgcrypt, scute, gpgrt, Bug Report
werner raised the priority of T7251: Autofetch signature keys used by a trusted introducer from Normal to High.
Nov 3 2025, 2:05 PM · gpd5x, vsd34, Feature Request, gnupg22
werner committed rWcb20683ba9e8: msi: Use "Everyone" for sysconfdir's gcrypt permissions. (authored by werner).
msi: Use "Everyone" for sysconfdir's gcrypt permissions.
Nov 3 2025, 11:38 AM
werner edited projects for T7896: Escape binary data in NOTATION* for status-fd, added: Feature Request, OpenPGP, gnupg; removed Bug Report.

The question is who shall correct the wrong encoding of notation data (assuming it is flagged as human readable). Escaping is a solution but needs a lot of extra bytes.

Nov 3 2025, 9:58 AM · gnupg, OpenPGP, Feature Request
werner renamed T7892: keyboxd: subkey listing issue with ADSKs from keyboxd: subkey issue connected to ADSK to keyboxd: a new subkey is sometimes not stored in the fingerprint table..
Nov 3 2025, 9:54 AM · gnupg26, Bug Report, keyboxd, gnupg
werner triaged T7892: keyboxd: subkey listing issue with ADSKs as High priority.

It is not an ADSK issue. The problem is that the new subkey has not been entered into the fingerprint table and can thus not be found.

Nov 3 2025, 9:52 AM · gnupg26, Bug Report, keyboxd, gnupg
werner added a comment to F31492247: agent-ssh-fix-2025-10-30.patch.

I think at line 82 we should use xtrymalloc as always in gpg-agent. xtrymalloc expands to gcry_malloc.

Nov 3 2025, 9:38 AM

Oct 28 2025

werner committed rW206c5d267a7f: Update GnuPG to 2.2.51 and libgcrypt to 1.8.12 (authored by werner).
Update GnuPG to 2.2.51 and libgcrypt to 1.8.12
Oct 28 2025, 3:01 PM
werner committed rG4df881d06219: Release 2.2.51 (authored by werner).
Release 2.2.51
Oct 28 2025, 2:58 PM
werner committed rGa75c060ef7e3: Post release updates (authored by werner).
Post release updates
Oct 28 2025, 2:58 PM
werner committed rWe40891056d9b: Fix recent poppler patches (authored by werner).
Fix recent poppler patches
Oct 28 2025, 2:54 PM
werner committed rWd7e620471560: Update GpgOL to 2.6.8 (authored by werner).
Update GpgOL to 2.6.8
Oct 28 2025, 2:23 PM
werner committed rW0496f61cf429: Create a sysconfdir for Libgcrypt (authored by werner).
Create a sysconfdir for Libgcrypt
Oct 28 2025, 2:23 PM
werner committed rD13048268c43f: swdb: libgcrypt 1.8.12 (authored by werner).
swdb: libgcrypt 1.8.12
Oct 28 2025, 9:26 AM
werner committed rCd3b98c1d5fe5: Release 1.8.12 (authored by werner).
Release 1.8.12
Oct 28 2025, 9:23 AM
werner committed rC1aa1469aa5cf: Post release updates (authored by werner).
Post release updates
Oct 28 2025, 9:23 AM
werner triaged T7887: Release Libgcrypt 1.8.12 as Normal priority.
Oct 28 2025, 8:51 AM · libgcrypt, Release Info

Oct 27 2025

werner committed rGbad0e15d8723: w32: Make the extra check for a compliant RNG actually work. (authored by werner).
w32: Make the extra check for a compliant RNG actually work.
Oct 27 2025, 5:47 PM
werner committed rC33413bf3ddc0: w32: Use CSIDL_COMMON_APPDATA instead of /etc (authored by werner).
w32: Use CSIDL_COMMON_APPDATA instead of /etc
Oct 27 2025, 5:02 PM
werner committed rD9293361655ef: swdb: gpgol 2.6.8 (authored by werner).
swdb: gpgol 2.6.8
Oct 27 2025, 3:13 PM
werner committed rG1e929abd20fa: gpg: Fix possible memory corruption in the armor parser. (authored by werner).
gpg: Fix possible memory corruption in the armor parser.
Oct 27 2025, 2:56 PM
werner committed rOaf7acd31dd0f: Post release updates (authored by werner).
Post release updates
Oct 27 2025, 2:47 PM
werner committed rOb268c8cef6cf: Release 2.6.8 (authored by werner).
Release 2.6.8
Oct 27 2025, 2:47 PM
werner committed rO412779bc5622: po: msgmerge (authored by werner).
po: msgmerge
Oct 27 2025, 2:47 PM
werner committed rMeba8776a3f59: Improve tracing for engine-gpgsm (authored by werner).
Improve tracing for engine-gpgsm
Oct 27 2025, 2:29 PM
werner committed rGad0c6c33c3d6: gpg: Do not use a default when asking for another output filename. (authored by werner).
gpg: Do not use a default when asking for another output filename.
Oct 27 2025, 12:49 PM
werner triaged T7875: GnuPG: Deletion of kyber key fails as Normal priority.

Workaround is to use --with-keygrip and delete both <keygrip>.key files. Problem here is that one part may be on a smartcard or one part might be shared (although not allowed) with other keys.

Oct 27 2025, 12:17 PM · Bug Report, PQC, gnupg26

Oct 24 2025

werner committed rA563252ade068: Work around missing getpeereid declaration on AIX. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
Work around missing getpeereid declaration on AIX.
Oct 24 2025, 4:45 PM
werner committed rG6570700fddcb: gpg: Improve/relax the checking of preference options. (authored by werner).
gpg: Improve/relax the checking of preference options.
Oct 24 2025, 4:21 PM
werner added a project to T7871: GpgOL: Msg export of mails with long subjects broken: Bug Report.

But you are able to do this w/o gpgol being active?

Oct 24 2025, 11:24 AM · Bug Report, gpgol
werner triaged T7873: Decrypt to foo.gpg.part files and rename as Normal priority.
Oct 24 2025, 9:37 AM · Feature Request, gnupg26

Oct 23 2025

werner added a comment to T7828: ldapserver configuration option duplicated.

gpgconf does not know about the global config files. Nor does it known about things like gpg.conf-2 etc.

Oct 23 2025, 2:44 PM · gpd5x, vsd34, Bug Report, kleopatra, vsd
werner merged task T7779: dirmngr: use different keyserver for sending and receiving certificates into T7866: Allow separate LDAP keyserver for uploading.
Oct 23 2025, 1:40 PM · dirmngr, vsd34, gpd5x
werner merged T7779: dirmngr: use different keyserver for sending and receiving certificates into T7866: Allow separate LDAP keyserver for uploading.
Oct 23 2025, 1:40 PM · gnupg22, vsd34, LDAP, Feature Request, gnupg26
werner committed rG115d138ba599: gpg: Fix possible memory corruption in the armor parser. (authored by werner).
gpg: Fix possible memory corruption in the armor parser.
Oct 23 2025, 11:36 AM

Oct 22 2025

werner triaged T7828: ldapserver configuration option duplicated as Normal priority.
Oct 22 2025, 5:17 PM · gpd5x, vsd34, Bug Report, kleopatra, vsd
werner committed rDe7b053512c50: Announce 2.5.13 (authored by werner).
Announce 2.5.13
Oct 22 2025, 4:34 PM
werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2025q4/000498.html on T7801: Release GnuPG 2.5.13.
Oct 22 2025, 4:17 PM · gnupg, Release Info
werner committed rDc053c74707e7: swdb: GnuPG 2.5.13 (authored by werner).
swdb: GnuPG 2.5.13
Oct 22 2025, 3:25 PM
werner committed rWa6e380f8f455: Update to GnuPG 2.5.13 (authored by werner).
Update to GnuPG 2.5.13
Oct 22 2025, 2:32 PM
werner moved T7804: de-vs compliance not shown if also password encrypted from WIP to QA on the gnupg26 board.
Oct 22 2025, 2:26 PM · test on hold, gnupg22 (gnupg-2.2.49), vsd33 (vsd-3.3.3), Bug Report, vsd, gnupg26
werner moved T1825: Add a re-encrypt to additional key from Backlog to QA on the gnupg26 board.
Oct 22 2025, 2:25 PM · gpd5x (gpd-5.0.0), gnupg26, Feature Request
werner changed the status of T1825: Add a re-encrypt to additional key from Open to Testing.
Oct 22 2025, 2:25 PM · gpd5x (gpd-5.0.0), gnupg26, Feature Request
werner moved T7855: keybox/keydb locking issue in 2.6 from Backlog to QA on the gnupg26 board.
Oct 22 2025, 2:24 PM · gpd5x (gpd-5.0.0), gnupg26
werner moved T7866: Allow separate LDAP keyserver for uploading from WIP to QA on the gnupg26 board.
Oct 22 2025, 2:24 PM · gnupg22, vsd34, LDAP, Feature Request, gnupg26
werner changed the status of T7840: Oddity with 7816 change_reference_data from Open to Testing.
Oct 22 2025, 2:23 PM · Bug Report, gnupg22, gnupg26, scd
werner updated the task description for T7869: Release GnuPG 2.5.14.
Oct 22 2025, 2:22 PM · gnupg, Release Info
werner closed T7756: Release GnuPG 2.5.12 as Resolved.
Oct 22 2025, 2:21 PM · Release Info, gnupg
werner updated the task description for T7801: Release GnuPG 2.5.13.
Oct 22 2025, 2:21 PM · gnupg, Release Info
werner updated the task description for T7869: Release GnuPG 2.5.14.
Oct 22 2025, 2:18 PM · gnupg, Release Info
werner committed rG81855360dacd: Post release updates (authored by werner).
Post release updates
Oct 22 2025, 2:17 PM
werner committed rGb39a0298112d: Release 2.5.13 (authored by werner).
Release 2.5.13
Oct 22 2025, 2:17 PM
werner committed rGc6aa701dbd22: po: msgmerge (authored by werner).
po: msgmerge
Oct 22 2025, 2:17 PM
werner triaged T7869: Release GnuPG 2.5.14 as Normal priority.
Oct 22 2025, 2:16 PM · gnupg, Release Info
werner committed rG4329e4746368: gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. (authored by werner).
gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures.
Oct 22 2025, 2:06 PM
werner committed rG9d302f978bd7: gpg: Error out on unverified output for non-detached signatures. (authored by werner).
gpg: Error out on unverified output for non-detached signatures.
Oct 22 2025, 2:02 PM
werner committed rGddb012be7fe2: gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. (authored by werner).
gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures.
Oct 22 2025, 2:02 PM
werner added a comment to T7855: keybox/keydb locking issue in 2.6 .

I'd sad we keep it as it is now (unless we see a regression). The real and only correct solution is the use of a daemon to serialize access.

Oct 22 2025, 1:34 PM · gpd5x (gpd-5.0.0), gnupg26
werner committed rGdb9705ef594d: gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. (authored by werner).
gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures.
Oct 22 2025, 12:38 PM
werner committed rG8abc320f2a75: gpg: Error out on unverified output for non-detached signatures. (authored by werner).
gpg: Error out on unverified output for non-detached signatures.
Oct 22 2025, 12:38 PM
werner committed rG1f85a6794eba: Update NEWS (authored by werner).
Update NEWS
Oct 22 2025, 12:38 PM

Oct 21 2025

werner committed rW11fa56c316be: Another Kleopatra update (authored by werner).
Another Kleopatra update
Oct 21 2025, 12:42 PM
werner added a comment to T7688: gpgme block when trying to encrypt.

That might be related to T2196 which has been hopefully fixed in 2.2.50 and also in the next 2.6. Closing this task.

Oct 21 2025, 12:18 PM · gpgol2
werner closed T7688: gpgme block when trying to encrypt as Resolved.

That might be related to T2196 which has been hopefully fixed in 2.2.50 and also in the next 2.6. Closing this task.

Oct 21 2025, 12:18 PM · gpgol2
werner committed rW7a17bd0d39b3: Update kleo, libkleo, gpg4win-tools, and gpgoljs (authored by werner).
Update kleo, libkleo, gpg4win-tools, and gpgoljs
Oct 21 2025, 12:01 PM
werner moved T7864: updated nl.po for gnupg 2.4 from Backlog to done on the gnupg24 board.
Oct 21 2025, 11:25 AM · gnupg24, Bug Report
werner closed T7864: updated nl.po for gnupg 2.4 as Resolved.
Oct 21 2025, 11:25 AM · gnupg24, Bug Report
werner added a comment to T7864: updated nl.po for gnupg 2.4.

I applied it to the 2.4 branch but please do not continue to translate for 2.4. 2.6 (master) is the new target.

Oct 21 2025, 11:24 AM · gnupg24, Bug Report
werner committed rG905138e25ff6: po: Update German translation (authored by werner).
po: Update German translation
Oct 21 2025, 11:24 AM
werner committed rGadb0837956fb: nl: Update Dutch translation (authored by werner).
nl: Update Dutch translation
Oct 21 2025, 11:17 AM
werner committed rW8a7287634530: Revert "msi: Install versioninfo.txt" (authored by werner).
Revert "msi: Install versioninfo.txt"
Oct 21 2025, 11:14 AM
werner added a reverting change for rWe71929bce8ef: msi: Install versioninfo.txt: rW8a7287634530: Revert "msi: Install versioninfo.txt".
Oct 21 2025, 11:14 AM
werner changed the status of T7866: Allow separate LDAP keyserver for uploading from Open to Testing.

Implemented but not tested at all.

Oct 21 2025, 10:48 AM · gnupg22, vsd34, LDAP, Feature Request, gnupg26
werner committed rG31de5d0d8cd5: dirmngr: New LDAP keyserver flag "upload" (authored by werner).
dirmngr: New LDAP keyserver flag "upload"
Oct 21 2025, 10:47 AM
werner triaged T7866: Allow separate LDAP keyserver for uploading as Normal priority.
Oct 21 2025, 10:42 AM · gnupg22, vsd34, LDAP, Feature Request, gnupg26
werner committed rG2b54dd035a32: w32: When deleting a private key retry up to 400ms. (authored by werner).
w32: When deleting a private key retry up to 400ms.
Oct 21 2025, 9:16 AM
werner committed rGd61546521b71: common: Reformat some comments in iobuf.c (authored by werner).
common: Reformat some comments in iobuf.c
Oct 21 2025, 9:16 AM

Oct 20 2025

werner committed rWc82376c69d4f: Update gpgme-2.0.1 checksum (authored by werner).
Update gpgme-2.0.1 checksum
Oct 20 2025, 3:00 PM
werner committed rWe71929bce8ef: msi: Install versioninfo.txt (authored by werner).
msi: Install versioninfo.txt
Oct 20 2025, 3:00 PM

Oct 16 2025

werner committed rWf3cd784c3796: Merge branch 'poppler-vsd3.3-cves' into vsd-3.3-branch (authored by werner).
Merge branch 'poppler-vsd3.3-cves' into vsd-3.3-branch
Oct 16 2025, 1:45 PM
werner committed rW9c04114c80b6: Add poppler patches also for the appimage. (authored by werner).
Add poppler patches also for the appimage.
Oct 16 2025, 1:45 PM
werner committed rWc91c3cba9d5e: gpgol: Add two patches to 2.6.7 (authored by werner).
gpgol: Add two patches to 2.6.7
Oct 16 2025, 1:33 PM