- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Oct 18 2022
Oct 18 2022
Oct 17 2022
Oct 17 2022
web: Add security advisory
• werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2022q4/000476.html on T6106: Release GnuPG 2.3.8.
Fixed Gpg4win version: https://lists.wald.intevation.org/pipermail/gpg4win-announce/2022/000098.html
appimage: Typo fix
swdb: GnuPG 2.2.40
Security Advisory 6230
Add CVE to the security advisory
swdb: gpg4win 4.0.4 and gnupgdesk 2.3.8
swdb: GnuPG 2.3.8
• werner set External Link to https://gnupg.org/blog/20221017-pepe-left-the-ksba.html on T6230: Release Libksba 1.6.2 (CVE-2022-3515).
As usual see https://gnupg.org/download for links to the latest packages. For Gpg4win see https://gpg4win.org
• werner renamed T6230: Release Libksba 1.6.2 (CVE-2022-3515) from Release Libksba 1.6.2 to Release Libksba 1.6.2 (CVE-2022-3515).
Oct 14 2022
Oct 14 2022
Merge remote-tracking branch 'origin'
Update to GnuPG 2.3.8
• werner committed rW8dff5492a25e: Prepare NEWS for 4.0.4 and post release updates for 3.1.25 (authored by • werner).
Prepare NEWS for 4.0.4 and post release updates for 3.1.25
Post release updates
• werner committed rW1fc993efc6f5: appimage: Fix signature checking of --version option. (authored by • werner).
appimage: Fix signature checking of --version option.
• werner committed rW68b0a1c9eb8e: appimage: Next try to get --keep-socket working (authored by • werner).
appimage: Next try to get --keep-socket working
doc: Update build instructions in README
appimage: Fix last commit
Update to GpgOL 2.5.5
appimage: Add trademark notices.
• werner committed rWd8befe24aa69: appimage: Add new start option --keep-socket (authored by • werner).
appimage: Add new start option --keep-socket
• werner committed rW371f9f768ca1: Fix build problems on systems with automake != 1.15 installed. (authored by • werner).
Fix build problems on systems with automake != 1.15 installed.
doc: Add a comment to the packages file.
Add support for dw2 exceptions
Prepare 3.1.25
Update to GnuPG 2.2.40
Oct 13 2022
Oct 13 2022
Post release updates
Release 2.3.8
speedo: Fix location of gpg-wks-client
Post release updates
• werner committed rG5df1c247be52: gpg: For de-vs use AES-128 instead of 3DES as implicit preference. (authored by • werner).
gpg: For de-vs use AES-128 instead of 3DES as implicit preference.
Release 2.2.40
• werner committed rG94092793f6a2: sm: Fix reporting of bad passphrase error (authored by ikloecker).
sm: Fix reporting of bad passphrase error
po: Auto update
• werner committed rG219dce6b33fa: speedo: Fix for a libgpg-error-config regression. (authored by • werner).
speedo: Fix for a libgpg-error-config regression.
po: Auto update
• werner committed rG970b250d65fa: po: Update Turkish translation (authored by Emir SARI <emir_sari@icloud.com>).
po: Update Turkish translation
• werner committed rG55eef71dbed7: wkd: gpg-wks-client --send checks if build with sendmail support (authored by • alexk).
wkd: gpg-wks-client --send checks if build with sendmail support
po: Update Czech translation.
• werner triaged T6238: regexp for trust signature domain restriction does not work if key only has an e-mail address as Normal priority.
$ ping git.gnupg.org
PING git.gnupg.org (217.69.76.56) 56(84) bytes of data.
64 bytes from cvs.gnupg.org (217.69.76.56): icmp_seq=1 ttl=58 time=6.74 ms
64 bytes from cvs.gnupg.org (217.69.76.56): icmp_seq=2 ttl=58 time=6.87 ms
• werner closed T6237: GPG.exe "write logs to file" fails to produce logs when executable is ran from network location. as Resolved.
You need to assign a drive letter.
Oct 12 2022
Oct 12 2022
• werner committed rG1383aa475059: agent: Introduce attribute "Remote-list" to KEYINFO. (authored by • werner).
agent: Introduce attribute "Remote-list" to KEYINFO.
Oct 11 2022
Oct 11 2022
• werner committed rD5323955b665a: tools: Let ftp-indexer handle timestamp version numbers. (authored by • werner).
tools: Let ftp-indexer handle timestamp version numbers.
Allow the use of a remote connection.
My suggestion is to clearly state that there is a direct Key Signature with an expiration date. Another feature would be to add a separate command to modify Direct Key Signatures. However, the latter has the problem that it help with proliferation of such signatures and other OpenPGP implementation will run into other problems. Thus for the whole ecosystem such an option is might not be a good idea.
Direct key signatures are rarely used. IIRC, we implemented that the same way PGP did it.
Oct 10 2022
Oct 10 2022
• werner closed T4482: GPG: Error on sign-key with compliance de-vs because of SHA-1 usage as Resolved.
• werner triaged T6234: Implement access to smartcards via a generic pkcs#11 interface as Normal priority.
Oct 7 2022
Oct 7 2022
• werner committed rGa946343f1475: wkd: New command --mirror for gpg-wks-client. (authored by • werner).
wkd: New command --mirror for gpg-wks-client.
• werner committed rG88042821d81b: wkd: Restrict gpg-wks-client --mirror to the given domains. (authored by • werner).
wkd: Restrict gpg-wks-client --mirror to the given domains.
• werner committed rGcd020284c9cf: wkd: Implement --blacklist option for gpg-wks-client (authored by • werner).
wkd: Implement --blacklist option for gpg-wks-client
• werner committed rGb18b9b972e2d: wkd: Silence gpg-wks-client diagnostics from gpg. (authored by • werner).
wkd: Silence gpg-wks-client diagnostics from gpg.
• werner committed rG0a151548b623: wkd: Restrict gpg-wks-client --mirror to the given domains. (authored by • werner).
wkd: Restrict gpg-wks-client --mirror to the given domains.
• werner committed rG4364283f757f: wkd: Silence gpg-wks-client diagnostics from gpg. (authored by • werner).
wkd: Silence gpg-wks-client diagnostics from gpg.
• werner committed rG94d13f53a3b4: common: Protect against a theoretical integer overflow in tlv.c (authored by • werner).
common: Protect against a theoretical integer overflow in tlv.c
• werner committed rGb0b4e24c4fa8: wkd: Implement --blacklist option for gpg-wks-client (authored by • werner).
wkd: Implement --blacklist option for gpg-wks-client
• werner committed rGc300253181cf: common: Protect against a theoretical integer overflow in tlv.c (authored by • werner).
common: Protect against a theoretical integer overflow in tlv.c
• werner committed rG2b2f8a1a0ca1: gpg: Show just keyserver and port with --send-keys. (authored by • werner).
gpg: Show just keyserver and port with --send-keys.
dirmngr: Minor fix for baseDN fallback.
• werner committed rGa70a3204c24a: dirmngr: Support paged LDAP mode for KS_GET (authored by • werner).
dirmngr: Support paged LDAP mode for KS_GET
• werner committed rG20cb9319d998: dirmngr: New options --first and --next for KS_GET. (authored by • werner).
dirmngr: New options --first and --next for KS_GET.
• werner committed rG98fbac614105: dirmngr: Change interrogate_ldap_dn for better memory semantics. (authored by • gniibe).
dirmngr: Change interrogate_ldap_dn for better memory semantics.
dirnmgr: Fix the function prototype.
• werner committed rG5516f92224b6: dirmngr: Interrogate LDAP server when base DN specified. (authored by joeyberkovitz).
dirmngr: Interrogate LDAP server when base DN specified.
• werner committed rG615c9717c15a: dirmngr: Support gpgMailbox for mode MAILSUB and MAILEND. (authored by • werner).
dirmngr: Support gpgMailbox for mode MAILSUB and MAILEND.
• werner committed rG44960e702ee3: dirmngr: Factor out interrogate_ldap_dn function. (authored by • werner).
dirmngr: Factor out interrogate_ldap_dn function.
• werner committed rGfe7114ebf344: po: Fix wrong LF in the German translation (authored by • werner).
po: Fix wrong LF in the German translation
• werner closed T5922: libgpg-error: gpgrt_log_get_fd always returns -1 even if it's not tcp/socket., a subtask of T5921: No sharing of log_fd between child process, as Resolved.
Release 1.46
Post release updates
swdb: gpgrt 1.46
packages: Update libksba
swdb: Libksba 1.6.2
Post release updates
Release 1.6.2