random:jent: Fix for jent_rng_is_initialized.
random:jent: Fix build with address sanitizer.
mpi: Fix redefinition of types.
secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN.
mpi: Introduce mpi_tfr and use it for point_tfr.
t-kem: fix test loop iteration
cipher:aria: Fix compiler error on NetBSD.
Update autogen.sh and gpg-error.m4 from upstream.
Update autogen.sh also for test(1) -o adjustment.
Adjust scripts for test(1) operator -a removal
mceliece6688128f: fix stack overflow crash on win64/wine
mceliece6688128f: fix UBSAN runtime errors
cipher-xts: harden mask generation against branch optimization
rijndael: harden mask generation against branch optimization
mpih-pow: harden condition calculation against branch optimization
kyber: harden mask generation against branch optimization
sntrup761: harden mask generation against branch optimization
sntrup761: use const-time helpers for memory comparison and cond move
mceliece6688128f: harden mask generation against branch optimization
const-time: add 64-bit fast paths for const-time buffer functions
mceliece6688128f: use const-time helper for memory comparison
Add stack burning for PQC algorithms
cipher:kyber: Apply a change from upstream.
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
fips,cipher: Fix the regression with disabled public-key algo.
Thank you for your report.
This ticket was created because building static-linked shows warnings from glibc for and .
Basically, we can/should ignore the warnings from glibc at link time (for normal use cases), because it is irrelevant.
Fix build with libassuan 2.
I see your point. I am afraid adding causes a larger changes.
Here are changes to fix the behavior:
Re-opened because a regression is reported.
fips,cipher: Fix the regression with disabled public-key algo.
• gniibe renamed
T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT` from
Security (internal) - Stack-based buffer overflow in TPM2 `PKDECRYPT` to
Stack-based buffer overflow in TPM2 `PKDECRYPT`.
On 2026-01-20, I found the message to of:
in may spam folder. It has a 10MB long attachment. That might be one of reasons to be identified as a spam.
Considering the current implementation (tpm2d doesn't support keyinfo like scdaemon), it would be good to check the buffer size.
(If key information is accessible easily, we can check with a specific key.)
• gniibe changed the status of
T7889: libgcrypt: HAVE_BROKEN_MLOCK from
Open to
Testing.
Backports have been done in both (1.10/1.11) branches.
build: Update build-aux and m4 from libgpg-error.
build: Update ksba.m4 from libksba.
build: Update build-aux and m4 from libgpg-error.
build: Update build-aux and m4 from libgpg-error.
build: Update build-aux and m4 from libgpg-error and libassuan.
build: Update build-aux and m4 from libgpg-error and libassuan.
build: Update build-aux and m4 from libgpg-error.
build: Fix typos in texinfo.tex.
build: Apply local change to texinfo.tex.
Fix for header files for sys/time.h and sys/select.h.
build: Update build-aux and m4 from libgpg-error.
build: Update build-aux and m4 from libgpg-error.
m4: Fix m4 macros for strict C compiler.
build: Remove unused build-aux/libtool.patch.
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
tests: It's start-stop-agent which invokes gpg-agent.
w32:spawn: Support the case without no helper.
w32:tests: Fix a test failure for tilde expansion.
w32: Use SetHandleInformation for _gpgme_io_pipe.
w32: Fix for process handle.
w32:spawn: Handle the case where ->hProcess has invalid handle.
tests:gpg: Use GPGME_PINENTRY_MODE_LOOPBACK for tests.
w32: Fix debug print on 64-bit machine.
po: Update Georgian Translation.
w32: Fix spawn for 64-bit machine.
Fix a regression wrt the auto-key-locate option.
tests:w32: Use Sleep instead of _sleep.
mpi:ec: Fix for use of ec_mulm_lli in _gcry_mpi_ec_get_affine.
w32: Fix use of GetProcAddress.
Fix function prototypes to match ones in libassuan.
Fix build with libassuan 2.
Fix portability for the use of the assuan types.
w32: Add a cast for GetProcAddress, add AM_CFLAGS for w32spawn.
Avoid K&R-style function definition.
Allow assuan_new_ext call with malloc_hooks=NULL.
@werner For rCd5e3cbfd , my mingw (GCC version 14) complains about the function-return-type difference of the prototype with .
build: Add support for IBM z/OS, fixing -lpthread check with glibc.
If we need to backport the locking fixes to 2.2, these two will be the start of changes:
Add support for IBM z/OS.
w32: Use CSIDL_COMMON_APPDATA if available.
cipher:kyber: Apply a change from upstream.