Thema: GnuPG/Gpg4win/OpenPGP ...

[SiLæncer]

Das GnuPG-Pack 18.9.1 aktualisiert Stunnel auf Version 5.49 sowie Enigmail auf Version 2.0.8, fügt im GnuPG-SpecialBuild zwei Verbesserungen ein und ändert ggf. die Konfiguration des WinPT-Dateimanagers.

Darin enthalten sind folgende Komponenten:

  - GnuPG: Version 1.4.23 (SpecialBuild) mit Paperkey 1.5, englisch/deutsch
  - WinPT Tray: Version 1.5.3, englisch/deutsch
  - GPA: Version 0.7.6, englisch/deutsch
  - GPGrelay (lokaler eMail-Relayserver): Version 0.962, englisch
  - Plugin für Thunderbird: Enigmail 2.0.8, mehrsprachig
  - Plugin für MS Outlook: G Data modified 0.94, englisch
  - Plugin für Pegasus Mail: QDGPG 1.2, englisch/deutsch
  - Plugin für Firefox: Enigform 0.9.0, englisch
  - PGPdump: Version 0.33 (SpecialBuild), englisch
  - Stunnel: Version 5.49 mit OpenSSL 1.0.2o, englisch
  - Plugin für Thunderbird: Encrypt if possible (S/MIME) 2.0.3, mehrsprachig

http://www.rose-indorf.de/gnupgpack/

[SiLæncer]

Release Notes

Hello,

today Gpg4win version 3.1.4 is released!

        https://www.gpg4win.org/download.html

It is important to us that Gpg4win continues to be available
as Free Software which can be downloaded anonymously without costs.
Because we know that this is the only way for some people to get
a software product which enables them to protect their communication.
As Gpg4win maintenance needs to be funded nevertheless, we recommend
that you set the price for yourself that shows the value of Gpg4win.

Details about Gpg4win 3.1.4:
    https://files.gpg4win.org/README-3.1.4.en.txt


Highlights in Gpg4win Version 3.1.4 (2018-10-17)
-------------------------------------------
* GpgOL: OpenPGP keys can be configured in Outook contacts.
* GpgOL: The mail address used for signature verification is now displayed.
* GpgOL: Improved S/MIME support.

More information: https://files.gpg4win.org/README-3.1.4.en.txt


We like to thank the authors of the included packages and first of all,
our supporters who made this release possible.


With best regards

    your Gpg4win Development Team

[close]

http://www.gpg4win.org/

[SiLæncer]

Changelog

GpgOL: Random misbehavior (crashes, freezes, etc.) after working with S/MIME has been fixed. (T4111)
GpgOL: It is now possible to create a system wide default configuration. (T4204)
GpgOL: Fixed encoding problems with unusual charsets. (T4156)
GpgOL: Disabling data debugging removes more data from debug logs. (T4193)
GpgOL: The internal access to key data is now faster. This fixes issues with automatic key resolution. (T4218)
GpgOL: Emails in Junk folders can now be moved and are marked. (T4188)
GpgOL: The question to save changes no longer appears when using the File menu. (T4236)
Kleopatra: Random misbehavior (crashes, freezes, etc.) after working with S/MIME has been fixed. (T4111)
Kleopatra: Improved CRL cache operations. (T3967)
GnuPG: Updated to version 2.1.11 (See: https://lists.gnupg.org/pipermail/gnupg-announce/2018q4/000432.html )

[close]

http://www.gpg4win.org/

[SiLæncer]

Das GnuPG-Pack 18.12.1 fügt u.a. wieder einige Aktualisierungen im GnuPG-SpecialBuild ein. Auf eine Aktualisierung von Stunnel auf Version 5.50 wurde aufgrund deren neuen Designs (Problem: Unterstützung Windows 32-/64-bit) vorerst verzichtet.

Darin enthalten sind folgende Komponenten:

  - GnuPG: Version 1.4.23 (SpecialBuild) mit Paperkey 1.5, englisch/deutsch
  - WinPT Tray: Version 1.5.3, englisch/deutsch
  - GPA: Version 0.7.6, englisch/deutsch
  - GPGrelay (lokaler eMail-Relayserver): Version 0.962, englisch
  - Plugin für Thunderbird: Enigmail 2.0.9, mehrsprachig
  - Plugin für MS Outlook: G Data modified 0.94, englisch
  - Plugin für Pegasus Mail: QDGPG 1.2, englisch/deutsch
  - Plugin für Firefox: Enigform 0.9.0, englisch
  - PGPdump: Version 0.33 (SpecialBuild), englisch
  - Stunnel: Version 5.49 mit OpenSSL 1.0.2o, englisch
  - Plugin für Thunderbird: Encrypt if possible (S/MIME) 2.0.3, mehrsprachig

http://www.rose-indorf.de/gnupgpack/

[SiLæncer]

Darin enthalten sind folgende Komponenten:

  - GnuPG: Version 1.4.23 (SpecialBuild) mit Paperkey 1.5, englisch/deutsch
  - WinPT Tray: Version 1.5.3, englisch/deutsch
  - GPA: Version 0.7.6, englisch/deutsch
  - GPGrelay (lokaler eMail-Relayserver): Version 0.962, englisch
  - Plugin für Thunderbird: Enigmail 2.0.9, mehrsprachig
  - Plugin für MS Outlook: G Data modified 0.94, englisch
  - Plugin für Pegasus Mail: QDGPG 1.2, englisch/deutsch
  - Plugin für Firefox: Enigform 0.9.0, englisch
  - PGPdump: Version 0.33 (SpecialBuild), englisch
  - Stunnel: Version 5.49 mit OpenSSL 1.0.2o, englisch
  - Plugin für Thunderbird: Encrypt if possible (S/MIME) 2.0.3, mehrsprachig

http://www.rose-indorf.de/gnupgpack/

[SiLæncer]

Protect various documents on your computer through encryption by relying on this handy application that can generate custom keys.

License: GPLv3

https://scand.com/products/wingpg/

[SiLæncer]

Changelog

  * gpg: Implement key lookup via keygrip (using the & prefix).
  * gpg: Allow generating Ed25519 key from existing key.
  * gpg: Emit an ERROR status line if no key was found with -k.
  * gpg: Stop early when trying to create a primary Elgamal key.  [#4329]
  * gpgsm: Print the card's key algorithms along with their keygrips
    in interactive key generation.
  * agent: Clear bogus pinentry cache in the error case.  [#4348]
  * scd: Support "acknowledge button" feature.
  * scd: Fix for USB INTERRUPT transfer.  [#4308]
  * wks: Do no use compression for the the encrypted challenge and
    response.

  Release-info: https://dev.gnupg.org/T4290

[close]

http://www.gnupg.org

[SiLæncer]

Changelog

gpg: Allow import of PGP desktop exported secret keys. Also avoid importing secret keys if the secret keyblock is not valid. [#4392]
gpg: Do not error out on version 5 keys in the local keyring.
gpg: Make invalid primary key algo obvious in key listings.
sm: Do not mark a certificate in a key listing as de-vs compliant if its use for a signature will not be possible.
sm: Fix certificate creation with key on card.
sm: Create rsa3072 bit certificates by default.
sm: Print Yubikey attestation extensions with --dump-cert.
agent: Fix cancellation handling for scdaemon.
agent: Support --mode=ssh option for CLEAR_PASSPHRASE. [#4340]
scd: Fix flushing of the CA-FPR DOs in app-openpgp.
scd: Avoid a conflict error with the "undefined" app.
dirmngr: Add CSRF protection exception for protonmail.
dirmngr: Fix build problems with gcc 9 in libdns.
gpgconf: New option --show-socket for use wity --launch.
gpgtar: Make option -C work for archive creation.

[close]

http://www.gnupg.org

[SiLæncer]

Changelog

Kleopatra: An issue has been fixed that could cause Kleopatra to generate broken TAR archives. (T4332) If you are affected see: https://wiki.gnupg.org/TroubleShooting#Restoring_corrupted_Archives_created_by_Kleopatra
Kleopatra: When importing from X509 directory services trusted-certs from dirmngr are also used. (T4269)
Kleopatra: Secret key backup has been simplified. (T4089)
Kleopatra: It is now possible to generate keys without signing capability. (T4373)
Kleopatra: Startup time has been slightly improved.
Kleopatra: Generating keys on OpenPGP Smartcards works again. (T4428)
Kleopatra: Shows the embedded, encrypted, file name if it differs from the actual file name. (T4390)
Kleopatra, GnuPG: Can now directly import secret keys exported from Symantec PGP Desktop. (T4392)
Pinentry: A problem preventing pinentry from starting in some minimal installations has been fixed. (T4347)
GPA: An error when generating new keys has been fixed. (T4265)
GpgOL: The context menu of a crypto mail now offers to permanently decrypt a message. (T3895)
GpgOL: Forwarding sent crypto mails works now. (T4321)
GpgOL: S/MIME Mail detection has been improved. Especially when sending from exchange to exchange. (T4262 T3935)
GpgOL: Now shows diagnostics in case sign/encrypt failed (T4435)
GpgOL: A crash when memory debugging was enabled has been fixed. (T4262)
GpgOL: With the new option "Import any keys included in mails" GpgOL can now automatically import keys from mail headers and attachments. (T4432)
GpgOL: The option to automatically toggle secure can now be modified to do this even if the keys are untrusted. (T4432)
GpgOL: An encrypted subject (e.g. from Enigmail) is now shown after decryption. (T4433)
GpgOL: Now uses descriptive names for OpenPGP MIME parts. (T4258)
GpgOL: Now provides a minimal API for other Addins or Programs to work with crypto mails which GpgOL would otherwise lock. (T4241)
GpgOL: There is now a warning in case GpgOL can't represent an Outlook internal attachment format, like for an Event. (T4184)
GnuPG: An issue that could cause dirmngr not to launch on some systems has been fixed. (T3381)
GnuPG: Updated to Version 2.2.15. (See: https://gnupg.org for News.)

[close]

http://www.gpg4win.org/

[SiLæncer]

Whats new:>>

Kleopatra: Fixed a regression from 3.1.6 that broke secret key export, keyserver refresh and keyserver upload. (T4438)
GPA: Fixed regressions from 3.1.6 that could lead to crashes. (T4440 T4439)

http://www.gpg4win.org/

[SiLæncer]

Changelog

Noteworthy changes in version 2.2.15
====================================

  * sm: Fix --logger-fd and --status-fd on Windows for non-standard
    file descriptors.

  * sm: Allow decryption even if expired keys are configured.  [#4431]

  * agent: Change command KEYINFO to print ssh fingerprints with other
    hash algos.

  * dirmngr: Fix build problems on Solaris due to the use of reserved
    symbol names.  [#4420]

  * wkd: New commands --print-wkd-hash and --print-wkd-url for
    gpg-wks-client.

  Release-info: https://dev.gnupg.org/T4434

[close]

http://www.gnupg.org

[SiLæncer]

Changelog

Noteworthy changes in version 2.2.16
====================================

  * gpg,gpgsm: Fix deadlock on Windows due to a keybox sharing
    violation.  [#4505]

  * gpg: Allow deletion of subkeys with --delete-key.  This finally
    makes the bang-suffix work as expected for that command.  [#4457]

  * gpg: Replace SHA-1 by SHA-256 in self-signatures when updating
    them with --quick-set-expire or --quick-set-primary-uid. [#4508]

  * gpg: Improve the photo image viewer selection.  [#4334]

  * gpg: Fix decryption with --use-embedded-filename.  [#4500]

  * gpg: Remove hints on using the --keyserver option.  [#4512]

  * gpg: Fix export of certain secret keys with comments.  [#4490]

  * gpg: Reject too long user-ids in --quick-gen-key.  [#4532]

  * gpg: Fix a double free in the best key selection code.  [#4462]

  * gpg: Fix the key generation dialog for switching back from EdDSA
    to ECDSA.

  * gpg: Use AES-192 with SHA-384 to comply with RFC-6637.

  * gpg: Use only the addrspec from the Signer's UID subpacket to
    mitigate a problem with another implementation.

  * gpg: Skip invalid packets during a keyring listing and sync
    diagnostics with the output.

  * gpgsm: Avoid confusing diagnostic when signing with the default
    key.  [#4535]

  * agent: Do not delete any secret key in --dry-run mode.

  * agent: Fix failures on 64 bit big-endian boxes related to URIs in
    a keyfile.  [#4501]

  * agent: Stop scdaemon after a reload with disable-scdaemon newly
    configured.  [#4326]

  * dirmngr: Improve caching algorithm for WKD domains.

  * dirmngr: Support other hash algorithms than SHA-1 for OCSP.  [#3966]

  * gpgconf: Make --homedir work for --launch.  [#4496]

  * gpgconf: Before --launch check for a valid config file.  [#4497]

  * wkd: Do not import more than 5 keys from one WKD address.

  * wkd: Accept keys which are stored in armored format in the
    directory.

  * The installer for Windows now comes with signed binaries.

  Release-info: https://dev.gnupg.org/T4509

[close]

http://www.gnupg.org

[SiLæncer]

Changelog

    Kleopatra: The certificate view now has configurable columns and no longer looses state after a refresh. (T4557 T3888 T3604)
    Kleopatra: The Dialog to add user-ids was improved and simplified. (T4139)
    Kleopatra: A warning has been removed when searching for fingerprints and the suggested behavior automated. (T4164)
    Kleopatra: The user-id certifications view has been improved to better show the state of the certifications. (T4458)
    GpgOL: S/MIME certificates can now be placed similar to OpenPGP keys into the address book. (T4479)
    GpgOL: A possible loss of attachments when forwarding crypto and non crypto mails has been fixed. (T4526)
    GpgOL: It no longer can happen that attachments with a Content-ID are hidden even though they are not visible in the message body. (T4203)
    GpgOL: Added Draft encryption as an optional and currently experimental feature. (T4388)
    GpgOL: S/MIME Mails now use the same icons as Outlook to avoid user confusion. (T4558)
    GpgOL: The internal format for S/MIME Messages has been changed to improve compatibility with other clients. (T4278 T4553)
    GpgOL: Automatic encryption is no longer triggered for users without an S/MIME certificate if S/MIME is preferred. (T4483)
    GpgOL: A possibility that S/MIME Mails were still handled by GpgOL even though S/MIME was disabled no longer exists. (T3935)
    GpgOL: The security approval dialog has been improved and handles situations with multiple keys better. (T4559)
    GpgOL: Several rare crashes have been fixed when memory debugging was enabled.
    GpgOL: Now accepts some more broken mails from other clients. (T4552)
    GpgOL, Kleopatra: A race condition that could lead to random hang-ups of the complete GnuPG system after using S/MIME has been fixed.
    GnuPG: Updated to Version 2.2.16. (See: https://gnupg.org for News.)

[close]

http://www.gpg4win.org/

[SiLæncer]

Whats new:>>

    Kleopatra: Fixed autocompletion of recipients. (T4569)
    GpgOL: Printing of crypto mails now fully works. (T4560)
    GpgOL: File -> Save As does now work. (T4318)

http://www.gpg4win.org/

[SiLæncer]

Changelog

    gpg: Ignore all key-signatures received from keyservers. This change is required to mitigate a DoS due to keys flooded with faked key-signatures. The old behaviour can be achieved by adding keyserver-options no-self-sigs-only,no-import-clean to your gpg.conf. [#4607]
    gpg: If an imported keyblocks is too large to be stored in the keybox (pubring.kbx) do not error out but fallback to an import using the options "self-sigs-only,import-clean". [#4591]
    gpg: New command --locate-external-key which can be used to refresh keys from the Web Key Directory or via other methods configured with --auto-key-locate.
    gpg: New import option "self-sigs-only".
    gpg: In --auto-key-retrieve prefer WKD over keyservers. [#4595]
    dirmngr: Support the "openpgpkey" subdomain feature from draft-koch-openpgp-webkey-service-07. [#4590].
    dirmngr: Add an exception for the "openpgpkey" subdomain to the CSRF protection. [#4603]
    dirmngr: Fix endless loop due to http errors 503 and 504. [#4600]
    dirmngr: Fix TLS bug during redirection of HKP requests. [#4566]
    gpgconf: Fix a race condition when killing components. [#4577]

[close]

http://www.gnupg.org