User Details
User Details
- User Since
- Mar 27 2017, 4:48 PM (476 w, 10 h)
- Roles
- Administrator
- Availability
- Busy Busy until Sep 9 2030.
Yesterday
Yesterday
• werner committed rG0335a9cb0491: gpgsm: Introduce system defined attribute _signingCertificateV2 (authored by • werner).
gpgsm: Introduce system defined attribute _signingCertificateV2
• werner committed rG2bce4a8d9343: common: Fix never used function strlist_copy. (authored by • werner).
common: Fix never used function strlist_copy.
• werner committed rG6d16c43c981b: gpgsm: Fix an uninitialized use of a callbback parameter. (authored by • werner).
gpgsm: Fix an uninitialized use of a callbback parameter.
• werner committed rMa05c27e670b7: Make GPGME_DECRYPT_SESSION_HASH also work for gnupg 2.2.55 (authored by • werner).
Make GPGME_DECRYPT_SESSION_HASH also work for gnupg 2.2.55
• werner committed rGfaa571fbff30: gpg: New options --show-session-hash and --show-only-session-hash. (authored by • werner).
gpg: New options --show-session-hash and --show-only-session-hash.
Remove not used file distsigkey.gpg
• werner triaged T8196: GnuPG: Designated revokation with certify-only primary keys does not work as Normal priority.
Thu, May 7
Thu, May 7
gpgsm: New server command SETATTR.
• werner committed rGe48b9a588d65: common: Add new function strlist_pop_try. (authored by • werner).
common: Add new function strlist_pop_try.
• werner added a comment to T8189: GnuPG: Bad signature on import of designated revokation certificate.
Just to clarify: The ticket is a about a bad signature diagnostic seen during import. However, the revocation works. The diagnostic is emitted by a second signature checking done to allow handling of standalone designated revocation certificates. The latter are uncommon because gpg does not create standalone revocation certificates. See also T8252 for further info.
• werner changed the status of T8159: gpgtar write outside --directory via symlink traversal from Open to Testing.
• werner committed rG21a8f3642072: dirmngr: Fix uninitialized use of union dns_any in dns_rr_cmp. (authored by • werner).
dirmngr: Fix uninitialized use of union dns_any in dns_rr_cmp.
Update libgpg-error and libksba
Update libgpg-error and libksba
Fix bug reference for the 1.61 release
Post release updates
Release 1.61
swdb: gpgrt 1.61
• werner updated the task description for T8239: Release GpgRT 1.61.
swdb: libksba 1.7.0
Post release updates
Release 1.7.0
• werner updated the task description for T8121: Release LibKSBA 1.7.0.
• werner triaged T8252: Use RECP_FPR subpacket for standalone designated revocations. as Normal priority.
Wed, May 6
Wed, May 6
• werner committed rG699052a40a2f: gpgsm: The option --attribute is now working. (authored by • werner).
gpgsm: The option --attribute is now working.
New function ksba_cms_add_attribute.
Minor debug output rework.
• werner committed rK0ef4070116d6: Various typo and comment fixes and minor test code output cleanup. (authored by • werner).
Various typo and comment fixes and minor test code output cleanup.
Tue, May 5
Tue, May 5
• werner committed rK2d120e345537: Fix other silent truncation of length fields. (authored by • werner).
Fix other silent truncation of length fields.
• werner committed rK55be6f57b636: Fix incorrect overflow guard condition in _ksba_ber_read_tl (authored by • werner).
Fix incorrect overflow guard condition in _ksba_ber_read_tl
• werner committed rKc44cc98460ea: Fix silent truncation of 64 bit length fields. (authored by • werner).
Fix silent truncation of 64 bit length fields.
gpgsm: Silence a compiler warning.
Mon, May 4
Mon, May 4
Sun, May 3
Sun, May 3
Next version will be 1.70.
Allow building AUTHENVELOPEDDATA.
• werner committed rG70fa606081e6: gpgsm: Use AES256-GCM by default in de-vs mode. (authored by • werner).
gpgsm: Use AES256-GCM by default in de-vs mode.
gpgsm: Implement GCM encryption.
• werner committed rEff90817a9520: Revert "Fix possible lockup in an atexit handler" (authored by • werner).
Revert "Fix possible lockup in an atexit handler"
• werner committed rG60a823c97bb0: gpgsm: Fix regression in password encrypted GCM data. (authored by • werner).
gpgsm: Fix regression in password encrypted GCM data.
Thu, Apr 30
Thu, Apr 30
• werner committed rG69c27fe37787: gpgsm: Avoid a final FAILURE status line w/o unsing --status-fd (authored by • werner).
gpgsm: Avoid a final FAILURE status line w/o unsing --status-fd
Fix possible lockup in an atexit handler
• werner committed rGe5472f5cf8c2: gpgsm: Make --with-ephemeral work correct with the keyboxd. (authored by • werner).
gpgsm: Make --with-ephemeral work correct with the keyboxd.
• werner committed rG8a3cfb65e033: scd:sc-hsm: Avoid buffer overflow with cards providing RSA > 2k. (authored by • werner).
scd:sc-hsm: Avoid buffer overflow with cards providing RSA > 2k.
scd:sc-hsm: Change error message style
• werner changed the status of T8244: sc-hsm buffer overflow for keys > 2k, a subtask of T6097: SC-HSM 4K Compatibility, from Open to Testing.
Wed, Apr 29
Wed, Apr 29
• werner added a comment to T8019: gpg does not print warning about untrusted key when verifying signatures made by expired (and untrusted) keys.
That is actually more complicated than I initially though. The reason is that expired is used like a trust level:
• werner changed the status of T8242: gpgrt: Possible stack overflow in es_printf for "%.100f" et al format specifiers. from Open to Testing.
• werner committed rEf7ded3ce666c: Fix possible stack overflow in es_printf for %.100f format. (authored by • werner).
Fix possible stack overflow in es_printf for %.100f format.
Tue, Apr 28
Tue, Apr 28
Fix out-of-bounds read in vfnameconcat.
Mon, Apr 27
Mon, Apr 27
• werner committed rGf5fd1fc11008: doc: Add release dates of other branches to NEWS. (authored by • werner).
doc: Add release dates of other branches to NEWS.
• werner committed rEe1762f6de187: po: update Polish translation (authored by Jakub Bogusz <qboosh@pld-linux.org>).
po: update Polish translation
Sun, Apr 26
Sun, Apr 26
• werner shifted T8210: Kleopatra: LPE issue on Windows from the Restricted Space space to the S1 Public space.
• werner moved T8240: Double free in gpgsm's decrypt function. from Backlog to WiP on the gnupg22 board.
• werner committed rG51aac7a5715d: gpgsm: Fix possible double free in the CMS parser. (authored by • werner).
gpgsm: Fix possible double free in the CMS parser.
• werner changed the status of T8240: Double free in gpgsm's decrypt function. from Open to Testing.
• werner committed rG2ceca1f5f978: gpgsm: Fix possible double free in the CMS parser. (authored by • werner).
gpgsm: Fix possible double free in the CMS parser.
• werner renamed T8240: Double free in gpgsm's decrypt function. from Doiuble free in gpgsm's decrypt function. to Double free in gpgsm's decrypt function..
Fri, Apr 24
Fri, Apr 24
GnuPG 2.5.19 announcement
swdb: GnuPG 2.5.19
Post release updates
po: msgmerge
Release 2.5.19
po: Update German translation
indent: Re-align check_key_signature2
• werner updated the task description for T7998: Release GnuPG 2.5.19.
Post release updates
Release 1.60
po: msgmerge
po: Update German translation
swdb: gpgrt 1.60
• werner updated the task description for T8112: Release GpgRT 1.60.
Thu, Apr 23
Thu, Apr 23
• werner committed rM63f18298d3f5: New decryption flag GPGME_DECRYPT_SESSION_HASH. (authored by • werner).
New decryption flag GPGME_DECRYPT_SESSION_HASH.
indent: Align a debug output.
• werner committed rGecd0f7afa1cf: gpg: New options --show-session-hash and --show-only-session-hash. (authored by • werner).
gpg: New options --show-session-hash and --show-only-session-hash.
• werner committed rKc8df64fe11e8: crl: Fix minor memory leak in case of a corrupt DER structure. (authored by • werner).
crl: Fix minor memory leak in case of a corrupt DER structure.
Wed, Apr 22
Wed, Apr 22
• werner committed rG2ab4cba36ccd: dirmngr: New keyword "clear" for --keyserver. (authored by • werner).
dirmngr: New keyword "clear" for --keyserver.
• werner added a comment to T8208: Missing bounds check in libgcrypt's Dilithium context handling.
FWIW: There is actually a problem in the reference code: Having a
fixed size buffer inside a function and allowing the caller to provide
content at arbitrary length is bad coding style because the caller
needs to know internals of the called function (in a different source
file).
• werner added a comment to T8211: Libgcrypt ECDH buffer overwrite with zeroes.
This is the original bug report to security at gnupg dated 2026-04-07:
• werner shifted T8211: Libgcrypt ECDH buffer overwrite with zeroes from the Restricted Space space to the S1 Public space.
Tue, Apr 21
Tue, Apr 21
Announce libgcrypt 1.12.2 et al.
Release 1.10.4