Page MenuHome GnuPG
Feed Advanced Search

Fri, Jan 30

gniibe committed rCae80106fb9d3: random:jent: Fix for jent_rng_is_initialized. (authored by gniibe).
random:jent: Fix for jent_rng_is_initialized.
Fri, Jan 30, 10:41 AM
gniibe committed rC5b260f28d2a5: random:jent: Fix build with address sanitizer. (authored by gniibe).
random:jent: Fix build with address sanitizer.
Fri, Jan 30, 10:41 AM
gniibe committed rC5937b1730df8: mpi: Fix redefinition of types. (authored by gniibe).
mpi: Fix redefinition of types.
Fri, Jan 30, 10:41 AM
gniibe committed rCa7aa18fff3cc: secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN. (authored by gniibe).
secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN.
Fri, Jan 30, 10:41 AM
gniibe committed rC172968f52174: mpi: Introduce mpi_tfr and use it for point_tfr. (authored by gniibe).
mpi: Introduce mpi_tfr and use it for point_tfr.
Fri, Jan 30, 10:41 AM
gniibe committed rCf9d5650ad2ea: t-kem: fix test loop iteration (authored by jukivili).
t-kem: fix test loop iteration
Fri, Jan 30, 10:41 AM
gniibe committed rC06b590e6e537: cipher:aria: Fix compiler error on NetBSD. (authored by collinfunk).
cipher:aria: Fix compiler error on NetBSD.
Fri, Jan 30, 10:41 AM
gniibe committed rC100efe24af52: Update autogen.sh and gpg-error.m4 from upstream. (authored by werner).
Update autogen.sh and gpg-error.m4 from upstream.
Fri, Jan 30, 10:41 AM
gniibe committed rCd0da36c1e5fe: Update autogen.sh also for test(1) -o adjustment. (authored by werner).
Update autogen.sh also for test(1) -o adjustment.
Fri, Jan 30, 10:41 AM
gniibe committed rC3e4eda9fe475: Adjust scripts for test(1) operator -a removal (authored by werner).
Adjust scripts for test(1) operator -a removal
Fri, Jan 30, 10:41 AM
gniibe committed rCb17ed8d1af20: mceliece6688128f: fix stack overflow crash on win64/wine (authored by jukivili).
mceliece6688128f: fix stack overflow crash on win64/wine
Fri, Jan 30, 10:41 AM
gniibe committed rCf4fda2acfaed: mceliece6688128f: fix UBSAN runtime errors (authored by jukivili).
mceliece6688128f: fix UBSAN runtime errors
Fri, Jan 30, 10:41 AM
gniibe committed rC1aca19b89768: cipher-xts: harden mask generation against branch optimization (authored by jukivili).
cipher-xts: harden mask generation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rCefa0e8fdee5c: rijndael: harden mask generation against branch optimization (authored by jukivili).
rijndael: harden mask generation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rC689d0b1396d4: mpih-pow: harden condition calculation against branch optimization (authored by jukivili).
mpih-pow: harden condition calculation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rC0df884de5e3c: kyber: harden mask generation against branch optimization (authored by jukivili).
kyber: harden mask generation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rCcf1165c26ac8: sntrup761: harden mask generation against branch optimization (authored by jukivili).
sntrup761: harden mask generation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rC7ff58b28726e: sntrup761: use const-time helpers for memory comparison and cond move (authored by jukivili).
sntrup761: use const-time helpers for memory comparison and cond move
Fri, Jan 30, 10:41 AM
gniibe committed rC9e1ee6efea9d: mceliece6688128f: harden mask generation against branch optimization (authored by jukivili).
mceliece6688128f: harden mask generation against branch optimization
Fri, Jan 30, 10:41 AM
gniibe committed rC379a0baffa85: const-time: add 64-bit fast paths for const-time buffer functions (authored by jukivili).
const-time: add 64-bit fast paths for const-time buffer functions
Fri, Jan 30, 10:41 AM
gniibe committed rC3a281e0b045a: mceliece6688128f: use const-time helper for memory comparison (authored by jukivili).
mceliece6688128f: use const-time helper for memory comparison
Fri, Jan 30, 10:41 AM
gniibe committed rC289c0a596fd3: Add stack burning for PQC algorithms (authored by jukivili).
Add stack burning for PQC algorithms
Fri, Jan 30, 10:41 AM
gniibe committed rC5ba143d51f37: cipher:kyber: Apply a change from upstream. (authored by gniibe).
cipher:kyber: Apply a change from upstream.
Fri, Jan 30, 10:41 AM
gniibe committed rC520c699c82e4: mpi: Use secure MPI in _gcry_mpi_assign_limb_space. (authored by gniibe).
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
Fri, Jan 30, 10:41 AM
gniibe committed rCc6e0658004b5: fips,cipher: Fix the regression with disabled public-key algo. (authored by gniibe).
fips,cipher: Fix the regression with disabled public-key algo.
Fri, Jan 30, 10:41 AM
gniibe claimed T8065: gnupg self test hang: clean migration.
Fri, Jan 30, 9:02 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8065: gnupg self test hang: clean migration.

Thank you for your report.

Fri, Jan 30, 9:00 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8066: gpgrt: Static linking support.

TL;DR
This ticket was created because building static-linked gpgv shows warnings from glibc for getpwnam and getpwuid.
Basically, we can/should ignore the warnings from glibc at link time (for normal use cases), because it is irrelevant.

Fri, Jan 30, 2:19 AM · Linux, Feature Request, gpgrt

Thu, Jan 29

gniibe created T8066: gpgrt: Static linking support.
Thu, Jan 29, 5:21 AM · Linux, Feature Request, gpgrt

Wed, Jan 28

gniibe committed rMe4623a83adf4: Fix build with libassuan 2. (authored by collinfunk).
Fix build with libassuan 2.
Wed, Jan 28, 7:04 AM

Fri, Jan 23

gniibe added a comment to T8049: Null pointer dereference with overlong signature packet.

I see your point. I am afraid adding skipme causes a larger changes.

Fri, Jan 23, 7:24 AM · segv, gnupg26, Bug Report

Thu, Jan 22

gniibe added a comment to T8049: Null pointer dereference with overlong signature packet.

Here are changes to fix the behavior:


Thu, Jan 22, 7:48 AM · segv, gnupg26, Bug Report
gniibe changed the status of T7338: Revamp the FIPS service indicator from Open to Testing.

Fixed in: rC2c1d41b5f86f: fips,cipher: Fix the regression with disabled public-key algo.

Thu, Jan 22, 5:48 AM · libgcrypt, FIPS, Feature Request
gniibe reopened T7338: Revamp the FIPS service indicator as "Open".

Re-opened because a regression is reported.

Thu, Jan 22, 5:47 AM · libgcrypt, FIPS, Feature Request
gniibe committed rC2c1d41b5f86f: fips,cipher: Fix the regression with disabled public-key algo. (authored by gniibe).
fips,cipher: Fix the regression with disabled public-key algo.
Thu, Jan 22, 5:30 AM
gniibe renamed T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT` from Security (internal) - Stack-based buffer overflow in TPM2 `PKDECRYPT` to Stack-based buffer overflow in TPM2 `PKDECRYPT`.
Thu, Jan 22, 12:33 AM · gnupg26, CVE, TPM, Bug Report

Wed, Jan 21

gniibe created T8049: Null pointer dereference with overlong signature packet.
Wed, Jan 21, 7:57 AM · segv, gnupg26, Bug Report

Jan 20 2026

gniibe added a comment to T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM.

On 2026-01-20, I found the message to security@gnupg.org of:
Message-ID: 4e708880-04ac-45bc-8d16-6b585f2652a1n@aisle.com
in may spam folder. It has a 10MB long attachment. That might be one of reasons to be identified as a spam.

Jan 20 2026, 6:42 AM · CVE, gnupg26, gpgagent, Bug Report
gniibe added a comment to T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT`.

Considering the current implementation (tpm2d doesn't support keyinfo like scdaemon), it would be good to check the buffer size.
(If key information is accessible easily, we can check with a specific key.)

Jan 20 2026, 6:06 AM · gnupg26, CVE, TPM, Bug Report
gniibe created T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT`.
Jan 20 2026, 1:54 AM · gnupg26, CVE, TPM, Bug Report
gniibe added projects to T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM: gpgagent, gnupg.
Jan 20 2026, 1:52 AM · CVE, gnupg26, gpgagent, Bug Report
gniibe created T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM.
Jan 20 2026, 1:52 AM · CVE, gnupg26, gpgagent, Bug Report

Jan 19 2026

gniibe changed the status of T7889: libgcrypt: HAVE_BROKEN_MLOCK from Open to Testing.

Backports have been done in both (1.10/1.11) branches.

Jan 19 2026, 6:58 AM · backport, libgcrypt, Bug Report
gniibe changed the status of T7127: GPGME deprecate/remove the helper gpgme-w32spawn program, a subtask of T7125: GPGME spawn for Windows 64-bit, from Open to Testing.
Jan 19 2026, 6:48 AM · Windows 64, gpgme
gniibe changed the status of T7127: GPGME deprecate/remove the helper gpgme-w32spawn program from Open to Testing.
Jan 19 2026, 6:48 AM · Windows 64, gpgme
gniibe closed T7187: gpgme: Debug output for size_t and off_t, a subtask of T6634: Port GPGME to Windows 64-bit, as Resolved.
Jan 19 2026, 6:47 AM · Windows 64, gpgme
gniibe closed T7187: gpgme: Debug output for size_t and off_t as Resolved.
Jan 19 2026, 6:47 AM · Windows 64, gpgme

Jan 15 2026

gniibe committed rP9e17a6fbccc9: build: Update m4 files. (authored by gniibe).
build: Update m4 files.
Jan 15 2026, 12:41 PM
gniibe committed rPTHd4e067d96c5e: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 12:14 PM
gniibe committed rT7edee62fc51f: build: Update ksba.m4 from libksba. (authored by gniibe).
build: Update ksba.m4 from libksba.
Jan 15 2026, 11:05 AM
gniibe committed rTaef8d7e3cb89: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 11:05 AM
gniibe committed rK63df5658b41d: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 9:14 AM
gniibe committed rS352b2962786f: build: Update build-aux and m4 from libgpg-error and libassuan. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error and libassuan.
Jan 15 2026, 8:46 AM
gniibe committed rM9e4e122097b4: build: Update build-aux and m4 from libgpg-error and libassuan. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error and libassuan.
Jan 15 2026, 6:48 AM
gniibe committed rAdcb600956c78: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 6:09 AM
gniibe committed rE9a68e459efdf: build: Fix typos in texinfo.tex. (authored by gniibe).
build: Fix typos in texinfo.tex.
Jan 15 2026, 6:07 AM
gniibe committed rC85bbb3373436: build: Apply local change to texinfo.tex. (authored by gniibe).
build: Apply local change to texinfo.tex.
Jan 15 2026, 6:06 AM

Jan 14 2026

gniibe committed rAc08091e84da7: Fix for header files for sys/time.h and sys/select.h. (authored by gniibe).
Fix for header files for sys/time.h and sys/select.h.
Jan 14 2026, 8:57 AM
gniibe committed rA46c3110d29ac: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 14 2026, 8:57 AM
gniibe committed rAe7d6c5697fcb: build: More m4 change. (authored by gniibe).
build: More m4 change.
Jan 14 2026, 8:57 AM
gniibe committed rCe53ae4f14f88: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 14 2026, 7:19 AM
gniibe committed rEa05a50100884: m4: Fix m4 macros for strict C compiler. (authored by gniibe).
m4: Fix m4 macros for strict C compiler.
Jan 14 2026, 7:10 AM
gniibe committed rEe0517a60eb04: build: Remove unused build-aux/libtool.patch. (authored by gniibe).
build: Remove unused build-aux/libtool.patch.
Jan 14 2026, 6:37 AM
gniibe added a project to T8032: libksba: Input validation for DER encoded INTEGER: S/MIME.
Jan 14 2026, 3:03 AM · S/MIME, libksba, Bug Report
gniibe created T8032: libksba: Input validation for DER encoded INTEGER.
Jan 14 2026, 3:02 AM · S/MIME, libksba, Bug Report

Jan 13 2026

gniibe committed rC6e77b09cff56: mpi: Use secure MPI in _gcry_mpi_assign_limb_space. (authored by gniibe).
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
Jan 13 2026, 6:22 AM

Jan 9 2026

gniibe committed rM9a1f409499c4: tests: It's start-stop-agent which invokes gpg-agent. (authored by gniibe).
tests: It's start-stop-agent which invokes gpg-agent.
Jan 9 2026, 7:21 AM
gniibe committed rM64f80903ec9b: w32:spawn: Support the case without no helper. (authored by gniibe).
w32:spawn: Support the case without no helper.
Jan 9 2026, 5:48 AM
gniibe committed rE4a1381642740: w32:tests: Fix a test failure for tilde expansion. (authored by gniibe).
w32:tests: Fix a test failure for tilde expansion.
Jan 9 2026, 4:01 AM

Jan 8 2026

gniibe committed rM58c57b25575c: w32: Use SetHandleInformation for _gpgme_io_pipe. (authored by gniibe).
w32: Use SetHandleInformation for _gpgme_io_pipe.
Jan 8 2026, 9:29 AM
gniibe committed rMdd559a6b142f: w32: Fix for process handle. (authored by gniibe).
w32: Fix for process handle.
Jan 8 2026, 9:29 AM

Jan 7 2026

gniibe committed rE753f59cd2c7a: w32:spawn: Handle the case where ->hProcess has invalid handle. (authored by gniibe).
w32:spawn: Handle the case where ->hProcess has invalid handle.
Jan 7 2026, 7:18 AM

Jan 5 2026

gniibe changed the status of T7968: Fixes needed for newer GCC/Mingw from Open to Testing.
Jan 5 2026, 9:51 AM

Dec 25 2025

gniibe committed rM538d7cd52b80: tests:gpg: Use GPGME_PINENTRY_MODE_LOOPBACK for tests. (authored by gniibe).
tests:gpg: Use GPGME_PINENTRY_MODE_LOOPBACK for tests.
Dec 25 2025, 2:36 AM

Dec 24 2025

gniibe committed rM11a8ef0e26bf: w32: Fix debug print on 64-bit machine. (authored by gniibe).
w32: Fix debug print on 64-bit machine.
Dec 24 2025, 1:52 AM

Dec 23 2025

gniibe committed rGc7472b1b9d2f: po: Update Georgian Translation. (authored by NorwayFun).
po: Update Georgian Translation.
Dec 23 2025, 9:48 AM
gniibe committed rM936015d49c38: w32: Fix spawn for 64-bit machine. (authored by gniibe).
w32: Fix spawn for 64-bit machine.
Dec 23 2025, 8:29 AM

Dec 22 2025

gniibe committed rMd242561dae26: Fix a regression wrt the auto-key-locate option. (authored by gniibe).
Fix a regression wrt the auto-key-locate option.
Dec 22 2025, 6:19 AM
gniibe committed rM5252c63ecae5: tests:w32: Use Sleep instead of _sleep. (authored by gniibe).
tests:w32: Use Sleep instead of _sleep.
Dec 22 2025, 6:19 AM

Dec 15 2025

gniibe committed rC92bbe34514ee: mpi:ec: Fix for use of ec_mulm_lli in _gcry_mpi_ec_get_affine. (authored by gniibe).
mpi:ec: Fix for use of ec_mulm_lli in _gcry_mpi_ec_get_affine.
Dec 15 2025, 7:58 AM
gniibe committed rC028926d3edb5: w32: Fix use of GetProcAddress. (authored by gniibe).
w32: Fix use of GetProcAddress.
Dec 15 2025, 7:57 AM
gniibe committed rM527c7fff9679: Fix function prototypes to match ones in libassuan. (authored by gniibe).
Fix function prototypes to match ones in libassuan.
Dec 15 2025, 7:14 AM
gniibe committed rM77b9e1de7d76: Fix build with libassuan 2. (authored by gniibe).
Fix build with libassuan 2.
Dec 15 2025, 7:14 AM

Dec 11 2025

gniibe committed rM46938bdde475: Fix portability for the use of the assuan types. (authored by gniibe).
Fix portability for the use of the assuan types.
Dec 11 2025, 7:28 AM
gniibe committed rM5fa2e405807d: w32: Add a cast for GetProcAddress, add AM_CFLAGS for w32spawn. (authored by gniibe).
w32: Add a cast for GetProcAddress, add AM_CFLAGS for w32spawn.
Dec 11 2025, 7:28 AM

Dec 8 2025

gniibe updated the task description for T7968: Fixes needed for newer GCC/Mingw.
Dec 8 2025, 1:32 AM
gniibe triaged T7968: Fixes needed for newer GCC/Mingw as Wishlist priority.
Dec 8 2025, 1:29 AM

Dec 5 2025

gniibe committed rM8b8dbd55c03a: Avoid K&R-style function definition. (authored by gniibe).
Avoid K&R-style function definition.
Dec 5 2025, 10:45 AM
gniibe committed rA515415b4e2ea: Allow assuan_new_ext call with malloc_hooks=NULL. (authored by gniibe).
Allow assuan_new_ext call with malloc_hooks=NULL.
Dec 5 2025, 7:55 AM

Dec 4 2025

gniibe added a comment to T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc.

@werner For rCd5e3cbfd , my mingw (GCC version 14) complains about the function-return-type difference of the prototype with GetProcAddress.

Dec 4 2025, 7:19 AM · libgcrypt, scute, gpgrt, Bug Report
gniibe committed rC5af59d8454ce: build: Add support for IBM z/OS, fixing -lpthread check with glibc. (authored by gniibe).
build: Add support for IBM z/OS, fixing -lpthread check with glibc.
Dec 4 2025, 6:29 AM
gniibe added a comment to T7855: keybox/keydb locking issue in 2.6 .

If we need to backport the locking fixes to 2.2, these two will be the start of changes:


Dec 4 2025, 6:22 AM · gpd5x (gpd-5.0.0), gnupg26

Dec 2 2025

gniibe committed rC550b2e2f13df: Add support for IBM z/OS. (authored by sachint).
Add support for IBM z/OS.
Dec 2 2025, 7:27 AM

Nov 28 2025

gniibe committed rSc3dc9c581631: w32: Use CSIDL_COMMON_APPDATA if available. (authored by gniibe).
w32: Use CSIDL_COMMON_APPDATA if available.
Nov 28 2025, 10:33 AM
gniibe added a comment to T7894: libgcrypt, scute, gpgrt/argparse, gnupg/dirmngr: Hard-coded /etc.

Scute fixed in rSc3dc9c581631: w32: Use CSIDL_COMMON_APPDATA if available.

Nov 28 2025, 6:13 AM · libgcrypt, scute, gpgrt, Bug Report

Nov 27 2025

gniibe updated the task description for T7957: dotlock clean up for error/warning message.
Nov 27 2025, 7:20 AM · gnupg, Bug Report
gniibe updated the task description for T7957: dotlock clean up for error/warning message.
Nov 27 2025, 7:18 AM · gnupg, Bug Report
gniibe claimed T7957: dotlock clean up for error/warning message.

Here is my proposal:

Nov 27 2025, 7:15 AM · gnupg, Bug Report
gniibe created T7957: dotlock clean up for error/warning message.
Nov 27 2025, 7:14 AM · gnupg, Bug Report

Nov 26 2025

gniibe committed rCbdc3724d721d: cipher:kyber: Apply a change from upstream. (authored by gniibe).
cipher:kyber: Apply a change from upstream.
Nov 26 2025, 2:56 AM