- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Mon, Jan 5
Mon, Jan 5
• ikloecker committed rKLEOPATRAb5ee4174225b: Avoid confusion with shared team keys (authored by • ikloecker).
Avoid confusion with shared team keys
Make tooltip less wide
• werner changed the visibility for T7907: Encrypted Message Malleability Checks are Incorrectly Enforced Causing Plaintext Recovery Attacks.
• werner changed the visibility for T7901: Cleartext Signature Forgery in NotDashEscaped header implementation in GnuPG.
What does gpgsm -k --with-colons print for Werner's QES key? The usage / capabilities should contain s (for signing) and q (for qualified signing). If q is missing then something isn't set up correctly.
Jan 5 2026
Jan 5 2026
l10n daemon script <scripty@kde.org> committed rMTPe2a4c5ac40bc: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTPf7ea1d83509b: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Jan 4 2026
Jan 4 2026
anthumchris closed T8010: Publish to NPM registry, a subtask of T7975: Official GPGme interface/bindings for Nodejs (node), as Resolved.
Published to NPM as gpgmejs, which provides disambiguation from gpgme, gpgmepp, gpgmepy, etc.
anthumchris changed the status of T8010: Publish to NPM registry, a subtask of T7975: Official GPGme interface/bindings for Nodejs (node), from Open to Testing.
Remove CI configuration
Remove Linux CI job
Remove CI configuration
Remove Linux CI job
l10n daemon script <scripty@kde.org> committed rMTPf6070eac25c7: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
completed working test and repo:
https://github.com/anthumchris/gpgmejs/
anthumchris closed T8003: Create first gnupgme nodejs binding for gpg version, a subtask of T7975: Official GPGme interface/bindings for Nodejs (node), as Resolved.
l10n daemon script <scripty@kde.org> committed rMTP00e7c980b210: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
That'd be great if possible, thank you!
Jan 3 2026
Jan 3 2026
heirecka committed rKLEOPATRA977ec6b88c0a: GIT_SILENT Update Appstream for new release (authored by heirecka).
GIT_SILENT Update Appstream for new release
heirecka committed rKLEOPATRAfffce3a24727: GIT_SILENT Upgrade release service version to 25.12.1. (authored by heirecka).
GIT_SILENT Upgrade release service version to 25.12.1.
heirecka committed rKLEOPATRAdbeb948b1ac8: GIT_SILENT Update Appstream for new release (authored by heirecka).
GIT_SILENT Update Appstream for new release
secmem: Add VirtualLock support for Windows.
jukivili committed rCd5cf2b90c7d0: rijndael-aesni: use assembly for moving first and last round key (authored by jukivili).
rijndael-aesni: use assembly for moving first and last round key
jukivili committed rC7afdbb2812b2: rijndael-aesni: prevent inlining AESNI functions by LTO (authored by jukivili).
rijndael-aesni: prevent inlining AESNI functions by LTO
jukivili committed rC9e3af928ee11: rijndael: add VAES/AVX512 accelerated implementation (authored by jukivili).
rijndael: add VAES/AVX512 accelerated implementation
jukivili committed rCef372b484e0f: rijndael-riscv-zvkned: optimize aes192 key setup (authored by jukivili).
rijndael-riscv-zvkned: optimize aes192 key setup
jukivili committed rCc1d9fff3b2eb: chacha20: avoid AVX512/AVX2/SSSE3 for single block processing with Zen5 (authored by jukivili).
chacha20: avoid AVX512/AVX2/SSSE3 for single block processing with Zen5
jukivili committed rC4c9d7a3ba939: rijndael-riscv-zvkned: optimize do_prepare_decryption (authored by jukivili).
rijndael-riscv-zvkned: optimize do_prepare_decryption
jukivili committed rC8b538a8c7669: camellia-gfni-avx512: add 1-block constant-time implementation (authored by jukivili).
camellia-gfni-avx512: add 1-block constant-time implementation
jukivili committed rCe5bc3b28260e: blake2: avoid AVX/AVX2/AVX512 when CPU has high vector inst latency (authored by jukivili).
blake2: avoid AVX/AVX2/AVX512 when CPU has high vector inst latency
aria-x86_64: fixes for CFI markings
jukivili committed rCb9bafd6c6cc5: camellia-simd128: optimize round key loading and key setup (authored by jukivili).
camellia-simd128: optimize round key loading and key setup
jukivili committed rCf5848080d41a: camellia-aesni-avx: optimize camellia_f used for key setup (authored by jukivili).
camellia-aesni-avx: optimize camellia_f used for key setup
Jan 2 2026
Jan 2 2026
• werner committed rGb8805d9a0f52: gpg: Error out on unverified output for non-detached signatures. (authored by • werner).
gpg: Error out on unverified output for non-detached signatures.
(Testing for now for better visibility. Real or Semi-real bugs with fixes are already set to Resolved)
• werner changed the status of T7902: OpenPGP Cleartext Signature Framework, a subtask of T7900: Cleartext Signature Forgery in GnuPG, from Open to Testing.
• werner closed T7903: Multiple Plaintext Attack on Detached PGP Signatures in GnuPG, a subtask of T7900: Cleartext Signature Forgery in GnuPG, as Resolved.
• werner changed the status of T7907: Encrypted Message Malleability Checks are Incorrectly Enforced Causing Plaintext Recovery Attacks, a subtask of T7900: Cleartext Signature Forgery in GnuPG, from Open to Testing.
• werner changed the status of T7907: Encrypted Message Malleability Checks are Incorrectly Enforced Causing Plaintext Recovery Attacks from Open to Testing.
The described attack is not easy to understand and as of today the
gpg.fail website seems to have the same content as the draft we
received on 2025-10-23. There it states:
anthumchris renamed T8009: Wasm for browser support from Consider Wasm for browser support to Wasm for browser support.
timegrid closed T8008: GpgEX: UI server already running, a subtask of T7528: Make it possible to run Kleopatra VSD and Kleopatra GPD in parallel, as Resolved.
The issue is resolved in gpg4win-5.0.0-beta479 @ win11:
- no error for opening .eml files
- no error for starting kleopatra while running (also not started twice anymore)
Thanks, I'll use even-numbered minor checks against the tags "gnupgXX_ver" in https://versions.gnupg.org/swdb.lst
No it is not related to T4030 because that has not yet been implemented. I am just upload a beta479 which should fix problem as wel as other similar problems.
this also happens, when kleopatra is started while already running. kleopatra is started twice then.
• werner closed T8007: FTP website displays 2.4 stable, a subtask of T8006: 2.4 » 2.5 stable mentions, as Resolved.
Please use the the swdb.lst which has all the version info. The website is actually build using this info. Well, except for the README file in the FTP section. I will update that too.
Notes:
- "Save encrypted" is only "Save" in the UI.
- This is still reproducible in gpg4win-5.0.0-beta476 @ win11
maybe related: T4030: GpgEX: Use process calls instead of UIServer protocol
anthumchris removed a parent task for T8002: Homepage shows 2.4.9 as current version: T8007: FTP website displays 2.4 stable.
anthumchris removed a subtask for T8007: FTP website displays 2.4 stable: T8002: Homepage shows 2.4.9 as current version.
anthumchris added a parent task for T8002: Homepage shows 2.4.9 as current version: T8006: 2.4 » 2.5 stable mentions.
anthumchris added a subtask for T8006: 2.4 » 2.5 stable mentions: T8002: Homepage shows 2.4.9 as current version.
anthumchris added a parent task for T8002: Homepage shows 2.4.9 as current version: T8007: FTP website displays 2.4 stable.
anthumchris added a subtask for T8007: FTP website displays 2.4 stable: T8002: Homepage shows 2.4.9 as current version.
Update GnupG and frontend packages
new export option keep-expired?
timegrid removed a project from T6299: Kleopatra: Updating key does results in "not changed" instead of "not found": LDAP.
l10n daemon script <scripty@kde.org> committed rMTPc3abf7ff8eff: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTPf7141520f8bb: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Jan 1 2026
Jan 1 2026
• werner committed rD18a889b403c7: web: Update current version on the main page. (authored by • werner).
web: Update current version on the main page.
Thanks for reporting. Will be fixed in a few minutes.
anthumchris renamed T8004: Bindings for The GnuPG UI Server Protocol from Bindings for GnuPG UI Server Protocol to Bindings for The GnuPG UI Server Protocol.
Completed working base repository with developer workflows for watching files and rebuilding/retesting:
https://github.com/anthumchris/node-addon
anthumchris closed T7992: Research Node.js Addons, a subtask of T7975: Official GPGme interface/bindings for Nodejs (node), as Resolved.
GIT_SILENT: happy new year
GIT_SILENT: happy new year
GIT_SILENT: happy new year
l10n daemon script <scripty@kde.org> committed rMTP6fb4deb82ab1: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
You mean ask ldv to renew it? Sure, can do, but we often want to check sigs that were valid at the time but are now expired (sometimes upstreams are not reachable anymore).
Dec 31 2025
Dec 31 2025
- --experimental-addon-modules stability for javascript ESM import syntax
Fix reuse lint
Fix documentation
continue to implement documentation