GnuPG 2.2.36 released

Werner Koch wk at gnupg.org
Wed Jul 6 20:38:04 CEST 2022


Hi!

This is a quick announcement that a new GnuPG release for 2.2 is
available.  We will also preprare a 2.3 release in the next days but due
to summer holidays things are a bit delayed.

See also https://dev.gnupg.org/T5949


Shalom-Salam,

   Werner


Noteworthy changes in version 2.2.36 (2022-07-06)
-------------------------------------------------

  * g10: Fix possibly garbled status messages in NOTATION_DATA.  This
    bug could trick GPGME and other parsers to accept faked status
    lines.  [T6027, CVE-2022-34903]

  * gpg: Handle leading zeroes in Ed25519 private keys and reverse
    change regarding Ed25519 SOS encoding as introduced with 2.2.34.
    [T5120]

  * gpg: Allow Unicode file names for iobuf_cancel under Windows.

  * gpgsm: Improve pkcs#12 import.  [T6037,T5793,T4921,T4757]

  * scd,p15: Fix reading certificates w/o length info.

  * scd,p15: Improve the displayed S/N for Technology Nexus cards.

  * scd,openpgp: Add workaround for ECC attribute on Yubikey. [T5963]

  * scd: Fix use of SCardListReaders for PC/SC.  [T5979]

  * gpgconf: New short options -X and -V.

  * Make sure to always set CONFIDENTIAL flag in Assuan.  [T5977]

  Release-info: https://dev.gnupg.org/T5949


-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220706/56029b51/attachment.sig>


More information about the Gnupg-users mailing list