gnupg2 (2.4.4-2ubuntu17.3) noble-security; urgency=medium
* debian/patches/fix-key-validity-regression-due-to-CVE-2025-
30258.patch:
- Fix a key validity regression following patches for CVE-2025-30258,
causing trusted "certify-only" primary keys to be ignored when checking
signature on user IDs and computing key validity. This regression makes
imported keys signed by a trusted "certify-only" key have an unknown
validity (LP: #2114775).
-- dcpi <dcpi@u22vm> Thu, 26 Jun 2025 13:17:22 +0000
gnupg2 (2.4.4-2ubuntu17.2) noble-security; urgency=medium
* SECURITY UPDATE: verification DoS via crafted subkey data
- debian/patches/CVE-2025-30258-1.patch: lookup key for merging/
inserting only by primary key in g10/getkey.c, g10/import.c,
g10/keydb.h.
- debian/patches/CVE-2025-30258-2.patch: remove a signature check
function wrapper in g10/mainproc.c, g10/packet.h, g10/sig-check.c.
- debian/patches/CVE-2025-30258-3.patch: fix a verification DoS due to
a malicious subkey in the keyring in g10/getkey.c, g10/gpg.h,
g10/keydb.h, g10/mainproc.c, g10/packet.h, g10/sig-check.c.
- debian/patches/CVE-2025-30258-4.patch: fix regression for the recent
malicious subkey DoS fix in g10/getkey.c, g10/packet.h.
- debian/patches/CVE-2025-30258-5.patch: fix double free of internal
data in g10/sig-check.c.
- CVE-2025-30258
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 28 Mar 2025 11:23:49 -0400
gnupg2 (2.4.4-2ubuntu17) noble; urgency=medium
* No-change rebuild against libnpth0t64
-- Steve Langasek <steve.langasek@ubuntu.com> Sat, 06 Apr 2024 16:25:03 +0000
gnupg2 (2.4.4-2ubuntu16) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <steve.langasek@ubuntu.com> Sun, 31 Mar 2024 00:07:54 +0000
gnupg2 (2.4.4-2ubuntu15) noble; urgency=medium
* Also drop build dependency on libcurl4-gnutls-dev.
-- Matthias Klose <doko@ubuntu.com> Thu, 07 Mar 2024 10:32:56 +0100
gnupg2 (2.4.4-2ubuntu13) noble; urgency=medium
* Old drop build dependency on ghostscript, only used in maintainer mode.
* Rebuild with gnutls28 t64 packages.
-- Matthias Klose <doko@ubuntu.com> Wed, 06 Mar 2024 09:31:32 +0100
gnupg2 (2.4.4-2ubuntu11) noble; urgency=medium
* Drop imagemagick & transfig build dependency,
only used in maintainer mode.
-- Matthias Klose <doko@ubuntu.com> Tue, 05 Mar 2024 10:39:06 +0100
gnupg2 (2.4.4-2ubuntu9) noble; urgency=medium
* d/p/no-keyboxd.patch: Do not use keyboxd by default
* gpg{,sm}: Recommend gpg-agent, dirmngr; suggest keyboxd
-- Julian Andres Klode <juliank@ubuntu.com> Fri, 01 Mar 2024 09:25:55 +0100
gnupg2 (2.4.4-2ubuntu8) noble; urgency=medium
* Regenerate status-codes.h and reenable --assert-pubkey_algo (LP: #2055193)
-- Julian Andres Klode <juliank@ubuntu.com> Wed, 28 Feb 2024 13:35:53 +0100
gnupg2 (2.4.4-2ubuntu7) noble; urgency=medium
* Fix a typo: Syntax error in Recommends: gpg-wks-client
-- Julian Andres Klode <juliank@ubuntu.com> Thu, 22 Feb 2024 19:36:17 +0100
gnupg2 (2.4.4-2ubuntu6) noble; urgency=medium
* Demote gpg-wks-client to Recommends instead
-- Julian Andres Klode <juliank@ubuntu.com> Thu, 22 Feb 2024 19:19:54 +0100
gnupg2 (2.4.4-2ubuntu5) noble; urgency=medium
* Do not depend on gpg-wks-client on i386
-- Julian Andres Klode <juliank@ubuntu.com> Thu, 22 Feb 2024 19:06:44 +0100
gnupg2 (2.4.4-2ubuntu4) noble; urgency=medium
* Stop building gpg-wks-server, gpg-wks-client on i386
-- Julian Andres Klode <juliank@ubuntu.com> Wed, 21 Feb 2024 16:22:49 +0100
gnupg2 (2.4.4-2ubuntu3) noble; urgency=medium
* debian/migrate-pubring-from-classic-gpg: Add 2.4 to allowlist
* d/tests/simple-tests: Use RSA keys for now.
'default' key type does not work in batch mode anymore due to needing two
subkeys (ed25519 for signing, and cv25519 for encryption).
* gnupg: Demote gpg-wks-server to Suggests.
We don't want this installed by default, it pulls in an mta, and we don't
host wks servers by default.
* gnupg: Demote gnupg-l10n to Recommends.
Translations are nice, but I want to be able to remove them on
an English system without breaking Depends.
* Demote all Recommends: gnupg to Suggests.
If we selectively install a specific part of gpg it should not
by default pull in the entire suite again.
-- Julian Andres Klode <juliank@ubuntu.com> Fri, 16 Feb 2024 11:03:09 +0100
gnupg2 (2.4.4-2ubuntu2) noble; urgency=medium
* Disable add-option-assert-pubkey_algo.patch for now
-- Julian Andres Klode <juliank@ubuntu.com> Tue, 13 Feb 2024 12:08:30 +0100
gnupg2 (2.4.4-2ubuntu1) noble; urgency=medium
* Merge with Debian experimental. Remaining changes:
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
- Drop the gpgv-win32 test
* The dirmngr change now patches debian/dirmngr.user.service directly
* Import upstream patch gpg: Add option --assert-pubkey_algo
-- Julian Andres Klode <juliank@ubuntu.com> Tue, 13 Feb 2024 10:44:42 +0100
gnupg2 (2.4.4-2) experimental; urgency=low
* Fix binary-all FTBFS by running a regular build for arch-all builds.
Otherwise the test suite was run against /usr/bin/gpg for
binary-all builds and failed if it was missing.
* Drop now unused (gpgcompose was removed upstream) build with
--enable-maintainer-mode.
* Speed up indep build by only running needed dh_auto_configure instances.
-- Andreas Metzler <ametzler@debian.org> Sun, 28 Jan 2024 09:02:36 +0100
gnupg2 (2.4.4-1) experimental; urgency=low
* Team upload.
* Drop transitional gpgv2 package (requested in #873186) and update CI
test dependencies. Also remove Breaks/Replaces against ancient
(pre-buster) versions of gpgv2.
* Drop Breaks/Replaces against ancient versions of gnupg/gnupg2.
* Delete keyboxd's Breaks/Replaces against gnupg2 - They are not needed.
* Update CI test dependencies (gnupg2 --> gnupg).
* New upstream version.
+ Drop from-master/keep-the-status-output.patch, unfuzz
Use-hkps-keys.openpgp.org-as-the-default-keyserver.patch.
+ Update gnutls b-d version requirement.
+ Update debian/copyright.
+ spelling-fixes.diff: Fix errors found by lintian.
* Fixup recommends of architecture-any packages on architecture-all package
"gnupg" to use (= ${source:Version}) instead of binary:Version. (Thanks,
James McCoy) Closes: #1060366
* Set --with-mailprog=/usr/sbin/sendmail and add a dependency on
default-mta | mail-transport-agent to gpg-wks-server. Closes: #1025782
* Run wrap-and-sort -ast.
-- Andreas Metzler <ametzler@debian.org> Sat, 27 Jan 2024 13:44:25 +0100
gnupg2 (2.4.3-2) experimental; urgency=low
* Duplicate lintian override for embedded-library in gpgv-static in old
lintian syntax to avoid auto-reject.
-- Andreas Metzler <ametzler@debian.org> Sun, 24 Sep 2023 19:09:42 +0200
gnupg2 (2.4.3-1) experimental; urgency=low
[ Andreas Metzler ]
* Team upload.
* New upstream version.
+ Update patch-queue.
+ Ship /usr/lib/gnupg/gpg-auth in scdaemon package.
+ Tighten b-d as required.
+ gpg-zip script dropped, bugreport therefore irrelevant. Closes: #913060
+ Also drop unused debian/gpg-zip.1.
+ systemd user unit examples dropped upstream (2.4.1).
* Merge changes from stable uploads after 2.2.27-2.
* Drop unused b-d on libcurl4-gnutls-dev. (See #980768, the other to be
removed b-ds could be necessary if at some point the respective doc
sources were patched in the Debian package.)
* Drop autopkgtests explicit dependency on essential package diffutils.
Closes: #953570
* Support the noudeb build profile. (Closes: #1024921) (Thanks, Helmut
Grohne)
* Drop dirmngr dependency on lsb-base. (Empty transitional package
depending on essential package)
* Drop unused lintian overrides for gpg-wks-client.1.
* Run wrap-and-sort -ast.
[ Bastien Roucariès ]
* Improve systemd integration for gpg-agent SSH emulation.
[ NIIBE Yutaka ]
* Fix debian/gpg-agent.install (not including keyboxd).
* Update debian/patches/series for gpg-agent-idling.
* Add gpg-agent-idling patch set from upstream (delete old implimatation).
* Update debian/patches/series for three patches of the following.
* Recover the behavior of BEGIN_ENCRYPTION status output.
- from-master/keep-the-status-output.patch: New.
* debian/control (keyboxd): New package.
* Add keybox systemd support.
- Add debian/keyboxd.user.service.
- Add debian/keyboxd.user.socket.
- debian-packaging/keyboxd-systemd-support.patch: New.
- debian/keyboxd.8: New.
- debian/keyboxd.README.Debian: New.
- debian/keyboxd.install: New.
- debian/keyboxd.manpages: New.
* Recover systemd-user support.
- Add debian/*.user.service.
- Add debian/*.user.socket.
- debian/rules (override_dh_installsystemduser): New.
- debian-packaging/keep-systemd-support.patch: New.
-- Andreas Metzler <ametzler@debian.org> Sun, 24 Sep 2023 14:44:27 +0200
gnupg2 (2.3.1-1) experimental; urgency=medium
* Upload to experimental
* New upstream version 2.3.1
-- Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Tue, 04 May 2021 21:44:48 +0200
gnupg2 (2.2.40-1.1ubuntu1) lunar; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
-- Gianfranco Costamagna <locutusofborg@debian.org> Tue, 28 Mar 2023 08:39:57 +0200
gnupg2 (2.2.40-1.1) unstable; urgency=medium
* Non-maintainer upload.
* In migration CI test skip debian-archive-bookworm-stable.gpg (and
aggregated keyring), gpg1 cannot read the ed25519 key. Closes: #1033155
-- Andreas Metzler <ametzler@debian.org> Sun, 26 Mar 2023 15:03:05 +0200
gnupg2 (2.2.40-1ubuntu2) lunar; urgency=medium
* No-change rebuild against libldap-2
-- Steve Langasek <steve.langasek@ubuntu.com> Thu, 15 Dec 2022 19:48:12 +0000
gnupg2 (2.2.40-1ubuntu1) lunar; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
-- Steve Langasek <steve.langasek@ubuntu.com> Fri, 04 Nov 2022 19:58:52 +0100
gnupg2 (2.2.40-1) unstable; urgency=medium
* new upstream version
* refresh patches
* import post-release cleanup patches from upstream
* drop stale NEWS files for dirmngr and gpg-agent
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 19 Oct 2022 11:09:42 -0400
gnupg2 (2.2.39-1) unstable; urgency=medium
* refresh upstream signing keys from g10/distsigkey.gpg
* add additional lintian override for version of lintian used on
ftp-master
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 06 Sep 2022 16:47:57 -0400
gnupg2 (2.2.38-1) unstable; urgency=medium
* new upstream version
* refresh patches (dropping those already upstream)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 01 Sep 2022 18:25:24 -0400
gnupg2 (2.2.35-3ubuntu1) kinetic; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
* Dropped changes, included upstream:
- debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
NOTATION_DATA in g10/cpr.c.
-- Steve Langasek <steve.langasek@ubuntu.com> Mon, 15 Aug 2022 18:01:56 -0700
gnupg2 (2.2.35-3) unstable; urgency=high
* fix security error from large notations (Thanks, Demi Marie Obenour)
(Closes: #1014157)
* Standards-Version: bump to 4.6.1 (no changes needed)
* clean up lintian-overrides
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 01 Jul 2022 02:01:17 -0400
gnupg2 (2.2.35-2) unstable; urgency=medium
* Only enable wine32 test on i386
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 29 Apr 2022 16:53:05 -0400
gnupg2 (2.2.35-1) unstable; urgency=medium
* New upstream release.
* refresh patches.
* Correct handling of 256-bit Ed25519 secret keys (Closes: #1010171).
* Building for Windows requires libgpg-error 1.45
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 27 Apr 2022 17:09:01 -0400
gnupg2 (2.2.34-1) unstable; urgency=medium
* New upstream release
* Refresh patches.
* ship gpg-check-pattern.1 from upstream
* override another pedantic lintian warning
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 22 Apr 2022 18:43:25 -0400
gnupg2 (2.2.27-4) unstable; urgency=medium
[ Christoph Biedl ]
* Remove myself from uploaders
[ Daniel Kahn Gillmor ]
* Replace Werner Koch's signing key
* convert to DEP-14 branch name
* standards-version: bump to 4.6.0 (no changes needed)
* add upstream metadata
* gpgv-static: fix up lintian-override
* d/copyright: update years
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 20 Apr 2022 19:03:29 -0400
gnupg2 (2.2.27-3ubuntu3) kinetic; urgency=medium
* SECURITY UPDATE: signature forgery via injection into the status line
- debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
NOTATION_DATA in g10/cpr.c.
- CVE-2022-34903
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 04 Jul 2022 12:17:43 -0400
gnupg2 (2.2.27-3ubuntu2) jammy; urgency=medium
* No-change rebuild for ppc64el baseline bump.
-- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com> Wed, 23 Mar 2022 14:55:24 +0100
gnupg2 (2.2.27-3ubuntu1) jammy; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
-- Steve Langasek <steve.langasek@ubuntu.com> Wed, 29 Dec 2021 15:59:57 -0800
gnupg2 (2.2.27-3) unstable; urgency=medium
* Avoid network interaction in generator. Closes: #993578
* Remove build dependency on librsvg2-bin. Closes: #993857
* Backport "Scd: Fix CCID driver for SCM SPR332/SPR532".
Closes: #982546
* Update watch file: Sticking to the 2.2 series for the time being
-- Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Sat, 18 Dec 2021 14:04:20 +0100
gnupg2 (2.2.27-2ubuntu1) jammy; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
* Dropped changes, included upstream:
- d/p/dirmngr-handle-EAFNOSUPPORT-at-connect_server.patch:
Fix IPv6 connectivity for dirmngr.
-- Steve Langasek <steve.langasek@ubuntu.com> Mon, 01 Nov 2021 11:19:52 -0700
gnupg2 (2.2.27-2) unstable; urgency=medium
* Add a NEWS entry about the end of support for ~/.gnupg/options.
Closes: #985158
-- Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Thu, 22 Apr 2021 20:40:36 +0200
gnupg2 (2.2.27-1) unstable; urgency=medium
[ NIIBE Yutaka ]
* New upstream release.
[ Christoph Biedl ]
* Tighten libgcrypt and libksba dependency
[ Daniel Kahn Gillmor ]
* change debian packaging branch name to debian/main
* refresh patches using gbp pq
* point to upstream commit used to improve spawning reliability
* Refresh 3072-bit default patch
* standards-version: bump to 4.5.1 (no changes needed)
* dh: bump to dh 13
* clean up lintian overrides
* fully drop symcryptrun
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 08 Feb 2021 17:57:00 -0500
gnupg2 (2.2.26-1) UNRELEASED; urgency=medium
[ Jeremiah C. Foster ]
* debian/scdaemon.udev: Add an entry for Librem Key.
[ NIIBE Yutaka ]
* New upstream release.
* refresh patches.
* debian/rules: Add build for regexp.
* debian/gnupg-utils.install: Remove /usr/bin/symcryptrun.
Fix for gpgsplit, which is changed in upstream from 'noinst'.
* debian/patches/gpg-change-agent-spawn-2019-07-24-v2.patch: New patch to
fix a race condition, backported from master (Closes: #868550, #972525).
* debian/scdaemon.udev: Add a generic entry for "Gnuk Token" and another
for GnuPG e.V.
* org.gnupg.scdaemon.metainfo.xml: Add an entry for GnuPG e.V.
-- NIIBE Yutaka <gniibe@fsij.org> Thu, 07 Jan 2021 09:07:21 +0900
gnupg2 (2.2.20-1ubuntu4) impish; urgency=medium
* No-change rebuild due to OpenLDAP soname bump.
-- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 21 Jun 2021 17:48:27 -0400
gnupg2 (2.2.20-1ubuntu3) hirsute; urgency=medium
* No-change rebuild to drop the udeb package.
-- Matthias Klose <doko@ubuntu.com> Mon, 22 Feb 2021 10:33:34 +0100
gnupg2 (2.2.20-1ubuntu2) hirsute; urgency=medium
* d/p/dirmngr-handle-EAFNOSUPPORT-at-connect_server.patch:
- Fix IPv6 connectivity for dirmngr (LP: #1910432)
-- Heitor Alves de Siqueira <halves@canonical.com> Sat, 16 Jan 2021 14:53:14 +0000
gnupg2 (2.2.20-1ubuntu1) groovy; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
- Don't declare diffutils as a test dependency, this package is
essential so always installed; and the dependency declaration breaks
cross-arch testing.
-- Steve Langasek <steve.langasek@ubuntu.com> Fri, 01 May 2020 14:58:28 -0700
gnupg2 (2.2.20-1) unstable; urgency=medium
* New upstream release
* refresh patches
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 23 Mar 2020 15:05:13 -0400
gnupg2 (2.2.19-3ubuntu2) focal; urgency=medium
* Don't declare diffutils as a test dependency, this package is essential
so always installed; and the dependency declaration breaks
cross-arch testing.
-- Steve Langasek <steve.langasek@ubuntu.com> Tue, 10 Mar 2020 11:50:46 -0700
gnupg2 (2.2.19-3ubuntu1) focal; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
-- Gianfranco Costamagna <locutusofborg@debian.org> Tue, 10 Mar 2020 10:59:47 +0100
gnupg2 (2.2.19-3) unstable; urgency=medium
* d/copyright update years
* Avoid errors in systemd environment generator (Closes: #950836)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 09 Mar 2020 14:27:42 -0400
gnupg2 (2.2.19-2) unstable; urgency=medium
* clarify that keys.openpgp.org is a debian-specific
choice for default keyserver
* Standards-version: bump to 4.5.0 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 27 Feb 2020 17:35:36 -0500
gnupg2 (2.2.19-1) unstable; urgency=medium
* New upstream release
[ Roger Shimizu ]
* d/control: Update Build-Depends: libgpg-error-dev (>= 1.35)
[ Daniel Kahn Gillmor ]
* clean up unnecessary whitespace
* Ship identifiers for Librem Key (Closes: #932474)
* drop extra systemd user service links (Closes: #931954)
* update signing key for Werner
* fixup patch
* drop patches already upstream
* refresh patches
* cherry-pick fix from upstream
* dirmngr-idling: add some commentary about dns housekeeping
* bump standards-version to 4.4.1 (no changes needed)
* sort scdaemon metainfo.xml modalias
* announce librem key in scdaemon metainfo.xml
* add lintian overrides for executables shipped by upstream in /usr/lib/gnupg/
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 08 Jan 2020 10:33:12 -0500
gnupg2 (2.2.17-3ubuntu1) focal; urgency=low
* Merge from Debian unstable. Remaining changes:
- Drop the gpgv-win32 test
- Honor http_proxy= environment variables by default in the systemd
user session dirmngr service.
(debian/patches/dirmngr-honor-http-proxy.patch)
- Export GPG_AGENT_INFO in the systemd-environment-generator too.
-- Dimitri John Ledkov <xnox@ubuntu.com> Wed, 20 Nov 2019 16:26:23 +0000
gnupg2 (2.2.17-3) unstable; urgency=medium
* avoid data loss when using keyservers (see https://dev.gnupg.org/T4628)
* avoid O(N^2) operations when listing certificates with many sigs
* d/tests/gpgv-win32: make more robust
* avoid system CAs for HKPS pool
* build-depend on gpgrt-tools for yat2m
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 16 Jul 2019 20:20:39 -0400
gnupg2 (2.2.17-2) unstable; urgency=medium
* d/tests/gpgv-win32: depend directly on wine32 (Closes: #905563)
* d/tests/gpgv-win32: by default pinentry-mode loopback is allowed upstream
* migrate-pubring-from-classic-gpg: make more robust (Closes: #931385)
* migrate-pubring-from-classic-gpg: always pass --homedir and --batch
* added test of migration script
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sat, 13 Jul 2019 21:36:24 -0400
gnupg2 (2.2.17-1) unstable; urgency=medium
* New upstream release
* upload to unstable, since buster is released
[ kwadronaut ]
* Specify what new and old keyrings are in migration script
[ Daniel Kahn Gillmor ]
* drop unnecessary patches, including broken patch for printing
revocation certificates
* use DEP-14 for debian/master
* refresh and reorganize patches
* only use Kristian's CA for the SKS HKPS pool
* switch to hkps://keys.openpgp.org as the default keyserver
* added NEWS entry about move to keys.openpgp.org
* Standards-Version: bump to 4.4.0 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 11 Jul 2019 22:09:21 -0400
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog gpgv`.
Generated by dwww version 1.16 on Sat Dec 13 16:25:50 CET 2025.