25/05/27 14:37:05.93 .net
Gpg4win 4.4.1
深刻なセキュリティ脆弱性の修正のためアップデート推奨
(入ってるGnuPG 2.4.8は公式にはまだリリースアナウンスされていないバージョン)
About the vulnerability:
Embedded malicious fonts in a PDF file may lead to code execution in Okular. CVSS Base Score: 8.1 (v3.1)
Details URLﾘﾝｸ(euvd.enisa.europa.eu) (alternative ids: CVE-2025-27363, GHSA-g8qj-jv5h-78cp)
There are other good things in Gpg4win 4.4.1, for example
* improvements in the Outlook Add-in (GpgOL)
* a better Kleopatra
* GnuPG upgraded to v2.4.8
Check out the URLﾘﾝｸ(www.gpg4win.org)
532:名無しさん＠お腹いっぱい。
25/06/03 09:22:28.77 .net
GnuPG 2.5.7 (テスト版)
Noteworthy changes in version 2.5.7 (2025-06-02)
================================================
[compared to version 2.5.6]
* gpg: Allow updating a SHA-1 key certification w/o using the --force-sign-key option. [T7663]
* gpg: The group key flag has now been fully implemented. [rG8833a34bf0]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid work. [rGd5a4a2dc89]
* gpg: Do not allow compressed key packets on import. [T7014]
* gpgsm: Allow an empty subject DN also during import. [T7171]
* agent: Recover the old behavior with max-cache-ttl=0. [T6681]
* agent: Fix ECC key on smartcard for composite KEM with PQC. [T7648]
* scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards. [T7662]
* gpg-mail-tube,wks: Support templates for mail content. [T7381]
* Use the KEM interface of Libgcrypt for encryption/decryption. [T7649]
* Fix a glitch in socket handling in Windows in case of a nonce mismatch. [rG645cf7d8fc]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはまだgpg 2.5.6
533:名無しさん＠お腹いっぱい。
25/06/03 21:34:55.63 .net
リリースアナウンスは出てないけど
URLﾘﾝｸ(www.gnupg.org)
> GnuPG 2.4.8 2025-05-14
5/14付で安定版2.4.8が出てることになってる
534:名無しさん＠お腹いっぱい。
25/06/21 01:06:13.08 .net
GnuPG 2.5.8 (テスト版)
Noteworthy changes in version 2.5.8 (2025-06-20)
================================================
[compared to version 2.5.7]
* gpg: Show revocation reason with a standard -k listing. [T7083]
* gpg: Emit a revocation reason as comment in a "pub" record. [T7083]
* agent: Fix regression in 2.5.7 decrypting with a card based cv25519 key. [T7676]
* scd:openpgp: Fix a regression in exporting card based ed25519 ssh keys. [T7589]
* dirmngr: Do not require a keyserver for "gpg --fetch-key". [T7693]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはgpg 2.5.6
535:名無しさん＠お腹いっぱい。
25/07/02 08:24:31.11 .net
Gpg4win 5.0.0-beta336
URLﾘﾝｸ(www.gpg4win.org)
同梱のGnuPGも2.5.8になってる
536:名無しさん＠お腹いっぱい。
25/07/14 23:15:18.50 .net
GnuPG 2.5.9 & Gpg4win 5.0.0-beta345
Noteworthy changes in version 2.5.9 (2025-07-10)
================================================
[compared to version 2.5.8]
* gpg: Add the revocation reason to the sigclass of a "rev" line.
Regression in 2.5.7. [T7073]
* gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name. [rG49a9171f63]
* gpg: Fix regression in using the secp256k1 curve. [T7698]
* dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests. [T7715]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
537:名無しさん＠お腹いっぱい。
25/08/09 15:39:44.49 .net
リリースのアナウンスはないけどGnuPG 2.5.11 & Gpg4win 5.0.0-beta357 (どちらもテスト版)
URLﾘﾝｸ(www.gnupg.org)
URLﾘﾝｸ(www.gpg4win.org)
538:名無しさん＠お腹いっぱい。
25/09/03 08:03:32.24 .net
GnuPG 2.5.12 (テスト版だけど "fully supported and thus ready for production use" と謳ってる)
Gpg4winの新しいベータ版はまだ出てない
Noteworthy changes in version 2.5.12 (2025-09-02)
=================================================
[compared to version 2.5.11]
* gpg: New options --[no-]auto-key-upload. [T7333]
* gpg: Keys send to an LDAP server are now first updated from that server. New keyserver option "no-update-before-send" to disable this feature. [T7730]
* gpg: Disable default compression for 7z compressed input. [rG53252628de]
* gpg: Fix a regression with composite PQC and ECC algos. [T7649]
* gpg: Fix the list of possible algos for --edit-key:addkey. [T7788]
* gpg: Allow to select the Kyber variants with --edit-key:addkey. [T7792]
* gpg: Avoid a second Pinentry pop-up for a configured ADSK during key generation. [T7491]
* gpg: Change the ADSK key binding time to use the current time. [T6882]
* gpgsm: Add option --no-qes-note and new trustlist flag "noconsent". [T7713]
* agent: Enable "relax" in the trustlist by default and add flag "norelax". [rG7b133027ae]
* agent: Fix a crash on Windows in the Putty support. [T7799]
* dirmgr: Support LDAP servers using a schema like the Windows LDS servers. [T7742]
* scd:openpgp: Support Yubikey attestation generation. [rG5ddfedf24a]
* gpgtar: Fix regression in end-of-archive detection. [T7757]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
539:名無しさん＠お腹いっぱい。
25/09/06 12:57:53.01 .net
Gpg4win 5.0.0-beta369
URLﾘﾝｸ(www.gpg4win.org)
同梱のGnuPGは2.5.12