[BLFS Trac] #23292: gnupg-2.5.20

#23292: gnupg-2.5.20
-----------------------------+-----------------------
 Reporter:  Douglas R. Reno  |      Owner:  blfs-book
     Type:  enhancement      |     Status:  new
 Priority:  elevated         |  Milestone:  13.1
Component:  BOOK             |    Version:  git
 Severity:  normal           |   Keywords:
-----------------------------+-----------------------
 New point version

 {{{
 Hello!

 We are pleased to announce the availability of a new GnuPG release:
 Version 2.5.20.  This release adds two features to gpgsm and fixes a
 some minor security bugs.

 The main features in the 2.5 series are improvements for 64 bit Windows
 and the introduction of Kyber (aka ML-KEM or FIPS-203) as PQC encryption
 algorithm.  Other than PQC support the 2.6 series will not differ a lot
 from 2.4 because the majority of changes are internal to make use of
 newer features from the supporting libraries.

 Note that the old 2.4 series reaches end-of-life in just 6 week.  Thus
 update to 2.5.20 in time.  As always with GnuPG, new versions are fully
 compatible with previous versions.

 Noteworthy changes in version 2.5.20 (2026-05-13)
 =================================================
          [compared to version 2.5.19]

  * New and extended features:

    - gpgsm: Implement GCM encryption.  Note that decryption works
      since version 2.3.2.  [T3979]

    - gpgsm: New option --attribute and server command SETATTR to
      include arbitrary signed or unsigned attributes into a signature.
      Enable only with libksba 1.7.0 or later.  [T4537]

    - gpgsm: Introduce system attribute _signingCertificateV2.
      [rG0335a9cb04]

  * Bug fixes:

    - gpg: Fix wrong assertion failure which could very rarely occur
      during key signature checking.  [rG693f5642f6]

    - gpg: Consider certify-only keys for revocation signature check.
      [T8196]

    - gpgsm: Fix possible double free in the CMS parser.  [T8240]

    - gpgsm: Fix possible too early removal of ephemeral keys.  [T8236]

    - gpgsm: Avoid emitting a final FAILURE status line if --status-fd
      is not used.  [rG69c27fe377]

    - gpgsm: Fix a regression in 2.5.19 for password encrypted GCM
      data.  [rG60a823c97b]

    - agent: Fix not using cache for pinentry loopback.  [rGd4b608a31f]

    - agent: Fix command PUT_SECRET by saving input line.  [rG1875bc185e]

    - keyboxd: Mark keys searched but not imported via LDAP correctly
      as ephemeral.  [T8048]

    - scdaemon: Avoid buffer overflow with SC-HSM cards providing RSA
      keys > 2k.  [T8244]

    - dirmngr: Fix uninitialized use of the dns_any union in
      dns_rr_cmp.  [T8251]

  Release-info: https://dev.gnupg.org/T7997
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23292>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page