24/09/13 12:53:07.14 .net
Changes which will also show up in the firthcoming 2.4.6:
* gpg: New command --quick-set-ownertrust. [rG967678d972]
* gpg: Indicate disabled keys in key listings and add list option "show-ownertrust". [rG2a0a706eb2]
* gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. [T7042]
* gpg: Do not allow to accidently set the RENC usage. [T7072]
* gpg: Accept armored files without CRC24 checksum. [T7071]
* gpg: New --import-option "only-pubkeys". [T7146]
* gpg: Repurpose the AKL mechanism "ldap" to work like the keyserver mechnism but only for LDAP keyservers. [rG068ebb6f1e]
* gpg: ADSKs are now configurable for new keys. [T6882]
* gpgsm: Emit user IDs with an empty Subject also in colon mode. [T7171]
* agent: Consider an empty pattern file as valid. [rGc27534de95]
* agent: Fix error handling of READKEY. [T6012]
* agent: Avoid random errors when storing key in ephemeral mode. [T7129, rGfdc5003956]
* agent: Make "SCD DEVINFO --watch" more robust. [T7151]
* scd: Improve KDF data object handling for OpenPGP cards. [T7058]
* scd: Avoid buffer overrun with more than 16 PC/SC readers. [T7129, rG4c1b007035]
* scd: Fix how the scdaemon on its pipe connection finishes. [T7160]
* gpgconf: Check readability of some files with -X and change its output format. [rG98e287ba6d]
* gpg-mail-tube: New tool to apply PGP/MIME encryption to a mail. [rG28a080bc9f]
* Fix some uninitialized variables and double frees in error code paths. [T7129]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
517:名無しさん＠お腹いっぱい。
24/09/13 12:54:16.43 .net
GnuPG 2.5.1 (2.6系に向けた公開テスト版)
Noteworthy changes in version 2.5.1 (2024-09-12)
================================================
[compared to version 2.5.0]
* gpg: The support for composite Kyber+ECC public key algorithms does now use the final FIPS-203 and LibrePGP specifications. The experimental keys from 2.5.0 are no longer supported. [T6815]
* gpg: New commands --add-recipients and --change-recipients. [T1825]
* gpg: New option --proc-all-sigs. [T7261]
* gpg: Fix a regression in 2.5.0 in gpgme's tests. [T7195]
* gpg: Make --no-literal work again for -c and --store. [T5852]
* gpg: Improve detection of input data read errors. [T6528]
* gpg: Fix getting key by IPGP record (rfc-4398). [T7288]
* gpgsm: New option --assert-signer. [T7286]
* gpgsm: More improvements to PKCS#12 parsing to cope with latest IVBB changes. [T7213]
* agent: Fix KEYTOCARD command when used with a loopback pinentry. [T7283]
* gpg-mail-tube: Make sure GNUPGHOME is set in vsd mode. New option --as-attach. [rG4511997e9e1b]
* Now uses the process spawn API from libgpg-error. [T7192,T7194]
* Removed the --enable-gpg-is-gpg2 configure time option. [rG2125f228d36c]
* Die Windows version will now be build for 64-Bit Windows and with the corresponding changes to the installation directory and Registry keys.
Release-info: URLﾘﾝｸ(dev.gnupg.org)
518:名無しさん＠お腹いっぱい。
24/10/30 08:33:32.03 .net
GnuPG 2.4.6
Noteworthy changes in version 2.4.6
===================================
* gpg: New command --quick-set-ownertrust. [rG967678d972]
* gpg: Indicate disabled keys in key listings and add list option "show-ownertrust". [rG2a0a706eb2]
* gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. [T7042]
* gpg: Do not allow to accidently set the RENC usage. [T7072]
* gpg: Accept armored files without CRC24 checksum. [T7071]
* gpg: New --import-option "only-pubkeys". [T7146]
* gpg: Repurpose the AKL mechanism "ldap" to work like the keyserver mechnism but only for LDAP keyservers. [rG6551281ca3]
* gpg: ADSKs are now configurable for new keys. [T6882]
* gpg: New option --proc-all-sigs. [T7261]
* gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key. [T7042]
* gpg: Make --no-literal work again for -c and --store. [T5852]
* gpg: Fix getting key by IPGP. [T7288]
* gpg: Validate the trustdb after the import of a trusted key. [T7200]
* gpg: Exclude expired trusted keys from the key validation process. [T7200]
* gpgsm: New option --assert-signer. [T7286]
* gpgsm: Emit user IDs with an empty Subject also in colon mode. [T7171]
* keyboxd: Fix a race condition on the database handle. [T7294]
* agent: Consider an empty pattern file as valid. [rGc27534de95]
* agent: Fix error handling of READKEY. [T6012]
* agent: Avoid random errors when storing key in ephemeral mode. [T7129, rG19d93a239d]
* agent: Make "SCD DEVINFO --watch" more robust. [T7151]
* agent: Fix detection of the yet unused trustflag de-vs. [T5079]
* scd: Improve KDF data object handling for OpenPGP cards. [T7058]
* scd: Avoid buffer overrun with more than 16 PC/SC readers. [T7129, rG524e3a9345]
* scd: Fix how the scdaemon on its pipe connection finishes. [T7160]
* gpgconf: Check readability of some files with -X and change its output format. [rG759adb2493]
* gpg-mail-tube: New tool to apply PGP/MIME encryption to a mail. [rGa564a9f66c]
* Fix a race condition in creating the socket directory. [T7332]
* Fix some uninitialized variables and double frees in error code paths. [T7129]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
519:名無しさん＠お腹いっぱい。
24/10/30 08:33:57.75 .net
2.2は今年いっぱいでEOLなので注意
520:名無しさん＠お腹いっぱい。
24/11/03 07:35:32.61 .net
lts にしてゾンビ化しようず
521:名無しさん＠お腹いっぱい。
24/11/28 20:55:48.50 .net
GnuPG 2.4.7 & Gpg4win 4.4.0
Noteworthy changes in version 2.4.7
===================================
* gpg: Allow the use of an ADSK subkey as ADSK subkey. [T6882]
* gpg: Avoid a failure exit code for expired ultimately trusted keys. [T7351]
* gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo. [T7425]
* gpg: Retain binary representation for import->export with Ed25519 key signatures. [T7426]
* gpgsm: Improvement for some rare P12 files. [rG5f9975abf5]
* scd: More mitigations against lock ups with multiple cards or apps. [T7323, T7402]
* gpgtar: Fix directory creation during extraction. [T7380]
* gpg-mail-tube: Minor fixes.
* gpgconf: Add list flag to trusted-key et al. [T7313]
* Fix a build problem on macOS (missing unistd.h). [T7193]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
522:名無しさん＠お腹いっぱい。
24/12/06 20:53:23.61 .net
GnuPG 2.5.2（テスト版）
Noteworthy changes in version 2.5.2 (2024-12-05)
================================================
[compared to version 2.5.1]
* gpg: Add option 16 to --full-gen-key to create ECC+Kyber. [T6638]
* gpg: For composite algos add the algo string to the colons listings. [T6638]
* gpg: Validate the trustdb after the import of a trusted key. [T7200]
* gpg: Exclude expired trusted keys from the key validation process. [T7200]
* gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key. [T7042]
* gpg: Retain binary representation for import->export with Ed25519 key signatures. [T7426]
* gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo. [T7425]
* gpg: Avoid a failure exit code for expired ultimately trusted keys. [T7351]
* gpg: Emit status error for an invalid ADSK. [T7322]
* gpg: Allow the use of an ADSK subkey as ADSK subkey. [T6882]
* gpg: Fix --quick-set-expire for V5 subkey fingerprints. [T7298]
* gpg: Robust error handling for SCD READKEY. [T7309]
* gpg: Fix cv25519 v5 export regression. [T7316]
* gpgsm: Nearly fourfold speedup of validated certificate listings. [T7308]
* gpgsm: Improvement for some rare P12 files. [rGf50dde6269]
* gpgsm: Terminate key listing on output write error. [T6185]
* agent: Add option --status to the LISTRUSTED command. [rG4275d5fa7a]
* agent: Fix detection of the yet unused trustflag de-vs. [T5079]
* agent: Allow ssh to sign data larger than the Assuan line length. [T7436]
* keyboxd: Fix a race condition on the database handle. [T7294]
* dirmngr: A list of used URLs for loaded CRLs is printed first in the output of the LISTCRL command. [T7337]
523:名無しさん＠お腹いっぱい。
24/12/06 20:53:32.92 .net
* scd: More mitigations against lock ups with multiple cards or apps. [T7323, T7402]
* gpgtar: Use log-file from common.conf only in --batch mode. [rGb389e04ef5]
* gpgtar: Fix directory creation during extraction. [T7380]
* gpg-mail-tube: Minor fixes.
* gpgconf: Add list flag to trusted-key et al. [T7313]
* Implement GNUPG_ASSUME_COMPLIANCE envvar and registry key for testing de-vs compliance mode. [rGb287fb5775,rG7b0be541a9]
* Enable additional runtime protections in speedo builds for Windows. [rG39aa206dc5]
* Fix a race condition in creating the socket directory. [T7332]
* Fix a build problem on macOS (missing unistd.h). [T7193]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
524:名無しさん＠お腹いっぱい。
25/01/14 19:03:39.69 .net
GnuPG 2.5.3 (テスト版)
Noteworthy changes in version 2.5.3 (2025-01-09)
================================================
[compared to version 2.5.2]
* gpg: Allow for signature subpackets of up to 30000 octets. [rG36dbca3e69]
* gpg: Silence expired trusted-key diagnostics in quiet mode. [T7351]
* gpg: Allow smaller session keys with Kyber and enforce the use of AES-256 if useful. [T7472]
* gpg: Fix regression in key generation from existing card key. [T7309,T7457]
* gpg: Print a warning if the card backup key could not be written. [T2169]
* The --supervised options of gpg-agent and dirmngr have been renamed to --deprecated-supervised as preparation for their removal. [rGa019a0fcd8]
* There is no more default for a keyserver.
Release-info: URLﾘﾝｸ(dev.gnupg.org)
525:名無しさん＠お腹いっぱい。
25/02/13 00:42:17.71 .net
GnuPG 2.5.4 (テスト版)
Noteworthy changes in version 2.5.4 (2025-02-12)
================================================
[compared to version 2.5.3]
* gpg: New option --disable-pqc-encryption. [rG00c31f8b04]
* gpg: Fix --quick-add-key for Weierstrass ECC with usage given. [T7506]
* gpg: Fix handling with no CRC armor. [T7071]
* gpg: New private Kyber keys are now cross-referenced using a new Link attribute. [T6638]
* gpg: Fix an import problem with keys having another primary key as a subkey. [T7527]
* gpgsm: Allow unattended PKCS#12 export without passphrase. [rG159e801043]
* gpgsm: Allow CSR generation with an unprotected key. [rG89055f24f4]
* agent: New option --change-std-env-name. [T7522]
* agent: Fix ssh-agent's request_identities for skipped Brainpool keys. [rG2469dc5aae]
* Do not package zlib and bzip2 object files in a Speedo release build. [T7442]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
526:名無しさん＠お腹いっぱい。
25/02/28 16:57:15.58 Zv19sIUwf
EVシフ├に渋滞緩和まで妨害したい國民民主のカ゛ソリン税値下け゛を飲む自民党に唖然とするが地球環境とか子の未来とかくそくらえの
玉木不倫雄－郎ってマトモなこと言ったことあるのかな，1號線走り続けるトラックとか社會的無駄もいいとこだし高速ワンコイン化は
惡くないか゛むしろ無料化して料金所撒去してIC増やして余計な道路も作らす゛スリム化するのか゛筋だろ
財源は氣侯変動で災害連發に騷音て゛知的産業壊滅させてる航空燃料を含む石油に一律リッ夕1萬圓課税クルマは99%軽減に灯油は99.9%軽減
とか言えは゛國民も納得しやすいた゛ろうに6万円給付されると聞いておせち注文してたジシ゛バハ゛知ってるか゛玉木のせいで半減残念でした
次回は素直に共産党にて゛も入れときなはれ曰本の問題は国民の寄生虫体質にあるわけで岡本≡成か゛またへナへナアホなこと言ってたか゛
自動化すればいいだけの何ひとつ価値生産しない公務員の何が大変なんた゛か最低賃金でも高すぎるしクソヘリ全廃．腐敗政府裁量権最小化
大企業への公共事業禁止して航空燃料税リッタ１萬円にして公平な最低所得保障する以外に付加価値型経済の実現なと゛あり得ない
(ref.) URLﾘﾝｸ(www.call4.jp)
URLﾘﾝｸ(haneda-project.jimdofree.com) , URLﾘﾝｸ(flight-route.com)
URLﾘﾝｸ(n-souonhigaisosyoudan.amebaownd.com)
527:名無しさん＠お腹いっぱい。
25/03/08 12:45:40.32 .net
GnuPG 2.5.5 (テスト版)
Noteworthy changes in version 2.5.5 (2025-03-07)
================================================
[compared to version 2.5.4]
* gpg: Fix a verification DoS due to a malicious subkey in the keyring. [T7527]
* dirmngr: Fix possible hangs due to blocking connection requests. [T6606, T7434]
* w32: On socket nonce mismatch close the socket. [T7434]
* w32: Print more detailed diagnostics for IPC errors.
* GPGME is not any more distributed with the Windows installer. Please install gpg4win to get gpgme version.
Release-info: URLﾘﾝｸ(dev.gnupg.org)
528:名無しさん＠お腹いっぱい。
25/03/08 12:46:52.02 .net
URLﾘﾝｸ(www.gpg4win.org)
Gpg4win開発版はこちらからダウンロード可能
(今リンクされてる5.0.0-beta103に含まれてるのはGnuPG 2.5.4なので注意)
529:名無しさん＠お腹いっぱい。
25/03/11 14:55:59.81 .net
Gpg4win 5.0.0-beta145
これにはGnuPG 2.5.5が入ってる
530:名無しさん＠お腹いっぱい。
25/05/09 22:20:00.42 .net
GnuPG 2.5.6 (テスト版) & Gpg4win 5.0.0-beta190
Noteworthy changes in version 2.5.6 (2025-05-08)
================================================
[compared to version 2.5.5]
* gpg: Add a flag to the filter expressions for left anchored substring match. [rGc12b7d047e]
* gpg: New list option "show-trustsig" to avoid resorting to colon mode for this info. [rG41d6ae8f41]
* gpg: New command --quick-tsign-key to create a trust signature. [rGd90b290f97]
* gpg: New keygen parameter "User-Id". [rGcfd597c603]
* gpg: New list options "show-trustsig". [rGrG41d6ae8f41]
* gpg: Fix double free of internal data in no-sig-cache mode [T7547]
* gpg: Signatures from revoked or expired keys do not anymore show up as missing keys. Fixes regression in 2.5.5. [T7583]
* gpgsm: Extend --learn-card by an optional s/n argument. [T7379]
* gpgsm: Skip expired certificates when selection a certificate by subject. [rG4cf83273e8]
* card: New command "ll" as alias for "list --cards". [rGd6ee7adebe]
* scd: Fix posssible lockup on Windows due to a lost select result. [rGa7ec3792c5]
* scd:p15: Accept P15 cards with a zero-length label. [rGdb25aa9887]
* keyboxd: Use case-insensitive search for mail addresses. [T7576]
* dirmngr: Fix a problem in libdns related to an address change from 127.0.0.1. [T4021]
* gpgconf: Fix reload and kill of keyboxd. [T7569]
* Fix logic for certain recsel conditions. [rG8968e84903]
* Add Solaris support to get_signal_name. [T7638]
* Fix build error of the test shell on AIX. [T7632]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
531:名無しさん＠お腹いっぱい。
25/05/27 14:37:05.93 .net
Gpg4win 4.4.1
深刻なセキュリティ脆弱性の修正のためアップデート推奨
(入ってるGnuPG 2.4.8は公式にはまだリリースアナウンスされていないバージョン)
About the vulnerability:
Embedded malicious fonts in a PDF file may lead to code execution in Okular. CVSS Base Score: 8.1 (v3.1)
Details URLﾘﾝｸ(euvd.enisa.europa.eu) (alternative ids: CVE-2025-27363, GHSA-g8qj-jv5h-78cp)
There are other good things in Gpg4win 4.4.1, for example
* improvements in the Outlook Add-in (GpgOL)
* a better Kleopatra
* GnuPG upgraded to v2.4.8
Check out the URLﾘﾝｸ(www.gpg4win.org)
532:名無しさん＠お腹いっぱい。
25/06/03 09:22:28.77 .net
GnuPG 2.5.7 (テスト版)
Noteworthy changes in version 2.5.7 (2025-06-02)
================================================
[compared to version 2.5.6]
* gpg: Allow updating a SHA-1 key certification w/o using the --force-sign-key option. [T7663]
* gpg: The group key flag has now been fully implemented. [rG8833a34bf0]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid work. [rGd5a4a2dc89]
* gpg: Do not allow compressed key packets on import. [T7014]
* gpgsm: Allow an empty subject DN also during import. [T7171]
* agent: Recover the old behavior with max-cache-ttl=0. [T6681]
* agent: Fix ECC key on smartcard for composite KEM with PQC. [T7648]
* scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards. [T7662]
* gpg-mail-tube,wks: Support templates for mail content. [T7381]
* Use the KEM interface of Libgcrypt for encryption/decryption. [T7649]
* Fix a glitch in socket handling in Windows in case of a nonce mismatch. [rG645cf7d8fc]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはまだgpg 2.5.6
533:名無しさん＠お腹いっぱい。
25/06/03 21:34:55.63 .net
リリースアナウンスは出てないけど
URLﾘﾝｸ(www.gnupg.org)
> GnuPG 2.4.8 2025-05-14
5/14付で安定版2.4.8が出てることになってる
534:名無しさん＠お腹いっぱい。
25/06/21 01:06:13.08 .net
GnuPG 2.5.8 (テスト版)
Noteworthy changes in version 2.5.8 (2025-06-20)
================================================
[compared to version 2.5.7]
* gpg: Show revocation reason with a standard -k listing. [T7083]
* gpg: Emit a revocation reason as comment in a "pub" record. [T7083]
* agent: Fix regression in 2.5.7 decrypting with a card based cv25519 key. [T7676]
* scd:openpgp: Fix a regression in exporting card based ed25519 ssh keys. [T7589]
* dirmngr: Do not require a keyserver for "gpg --fetch-key". [T7693]
Release-info: URLﾘﾝｸ(dev.gnupg.org)
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはgpg 2.5.6
535:名無しさん＠お腹いっぱい。
25/07/02 08:24:31.11 .net
Gpg4win 5.0.0-beta336
URLﾘﾝｸ(www.gpg4win.org)
同梱のGnuPGも2.5.8になってる
536:名無しさん＠お腹いっぱい。
25/07/14 23:15:18.50 .net
GnuPG 2.5.9 & Gpg4win 5.0.0-beta345
Noteworthy changes in version 2.5.9 (2025-07-10)
================================================
[compared to version 2.5.8]
* gpg: Add the revocation reason to the sigclass of a "rev" line.
Regression in 2.5.7. [T7073]
* gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name. [rG49a9171f63]
* gpg: Fix regression in using the secp256k1 curve. [T7698]
* dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests. [T7715]
Release-info: URLﾘﾝｸ(dev.gnupg.org)