Gpg4win 4.4.1
深刻なセキュリティ脆弱性の修正のためアップデート推奨
(入ってるGnuPG 2.4.8は公式にはまだリリースアナウンスされていないバージョン)
About the vulnerability:
Embedded malicious fonts in a PDF file may lead to code execution in Okular. CVSS Base Score: 8.1 (v3.1)
Details https://euvd.enisa.europa.eu/enisa/EUVD-2025-6367 (alternative ids: CVE-2025-27363, GHSA-g8qj-jv5h-78cp)
There are other good things in Gpg4win 4.4.1, for example
* improvements in the Outlook Add-in (GpgOL)
* a better Kleopatra
* GnuPG upgraded to v2.4.8
Check out the https://www.gpg4win.org/change-history.html
探検
PGP / gpg スレ
2025/05/27(火) 14:37:05.93
2025/06/03(火) 09:22:28.77
GnuPG 2.5.7 (テスト版)
Noteworthy changes in version 2.5.7 (2025-06-02)
================================================
[compared to version 2.5.6]
* gpg: Allow updating a SHA-1 key certification w/o using the --force-sign-key option. [T7663]
* gpg: The group key flag has now been fully implemented. [rG8833a34bf0]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid work. [rGd5a4a2dc89]
* gpg: Do not allow compressed key packets on import. [T7014]
* gpgsm: Allow an empty subject DN also during import. [T7171]
* agent: Recover the old behavior with max-cache-ttl=0. [T6681]
* agent: Fix ECC key on smartcard for composite KEM with PQC. [T7648]
* scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards. [T7662]
* gpg-mail-tube,wks: Support templates for mail content. [T7381]
* Use the KEM interface of Libgcrypt for encryption/decryption. [T7649]
* Fix a glitch in socket handling in Windows in case of a nonce mismatch. [rG645cf7d8fc]
Release-info: https://dev.gnupg.org/T7671
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはまだgpg 2.5.6
Noteworthy changes in version 2.5.7 (2025-06-02)
================================================
[compared to version 2.5.6]
* gpg: Allow updating a SHA-1 key certification w/o using the --force-sign-key option. [T7663]
* gpg: The group key flag has now been fully implemented. [rG8833a34bf0]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid work. [rGd5a4a2dc89]
* gpg: Do not allow compressed key packets on import. [T7014]
* gpgsm: Allow an empty subject DN also during import. [T7171]
* agent: Recover the old behavior with max-cache-ttl=0. [T6681]
* agent: Fix ECC key on smartcard for composite KEM with PQC. [T7648]
* scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards. [T7662]
* gpg-mail-tube,wks: Support templates for mail content. [T7381]
* Use the KEM interface of Libgcrypt for encryption/decryption. [T7649]
* Fix a glitch in socket handling in Windows in case of a nonce mismatch. [rG645cf7d8fc]
Release-info: https://dev.gnupg.org/T7671
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはまだgpg 2.5.6
2025/06/03(火) 21:34:55.63
リリースアナウンスは出てないけど
https://www.gnupg.org/download/index.html
> GnuPG 2.4.8 2025-05-14
5/14付で安定版2.4.8が出てることになってる
https://www.gnupg.org/download/index.html
> GnuPG 2.4.8 2025-05-14
5/14付で安定版2.4.8が出てることになってる
2025/06/21(土) 01:06:13.08
GnuPG 2.5.8 (テスト版)
Noteworthy changes in version 2.5.8 (2025-06-20)
================================================
[compared to version 2.5.7]
* gpg: Show revocation reason with a standard -k listing. [T7083]
* gpg: Emit a revocation reason as comment in a "pub" record. [T7083]
* agent: Fix regression in 2.5.7 decrypting with a card based cv25519 key. [T7676]
* scd:openpgp: Fix a regression in exporting card based ed25519 ssh keys. [T7589]
* dirmngr: Do not require a keyserver for "gpg --fetch-key". [T7693]
Release-info: https://dev.gnupg.org/T7672
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはgpg 2.5.6
Noteworthy changes in version 2.5.8 (2025-06-20)
================================================
[compared to version 2.5.7]
* gpg: Show revocation reason with a standard -k listing. [T7083]
* gpg: Emit a revocation reason as comment in a "pub" record. [T7083]
* agent: Fix regression in 2.5.7 decrypting with a card based cv25519 key. [T7676]
* scd:openpgp: Fix a regression in exporting card based ed25519 ssh keys. [T7589]
* dirmngr: Do not require a keyserver for "gpg --fetch-key". [T7693]
Release-info: https://dev.gnupg.org/T7672
Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはgpg 2.5.6
2025/07/02(水) 08:24:31.11
2025/07/14(月) 23:15:18.50
GnuPG 2.5.9 & Gpg4win 5.0.0-beta345
Noteworthy changes in version 2.5.9 (2025-07-10)
================================================
[compared to version 2.5.8]
* gpg: Add the revocation reason to the sigclass of a "rev" line.
Regression in 2.5.7. [T7073]
* gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name. [rG49a9171f63]
* gpg: Fix regression in using the secp256k1 curve. [T7698]
* dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests. [T7715]
Release-info: https://dev.gnupg.org/T7695
Noteworthy changes in version 2.5.9 (2025-07-10)
================================================
[compared to version 2.5.8]
* gpg: Add the revocation reason to the sigclass of a "rev" line.
Regression in 2.5.7. [T7073]
* gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name. [rG49a9171f63]
* gpg: Fix regression in using the secp256k1 curve. [T7698]
* dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests. [T7715]
Release-info: https://dev.gnupg.org/T7695
2025/08/09(土) 15:39:44.49
リリースのアナウンスはないけどGnuPG 2.5.11 & Gpg4win 5.0.0-beta357 (どちらもテスト版)
https://www.gnupg.org/download/index.html
https://www.gpg4win.org/version5.html
https://www.gnupg.org/download/index.html
https://www.gpg4win.org/version5.html
2025/09/03(水) 08:03:32.24
GnuPG 2.5.12 (テスト版だけど "fully supported and thus ready for production use" と謳ってる)
Gpg4winの新しいベータ版はまだ出てない
Noteworthy changes in version 2.5.12 (2025-09-02)
=================================================
[compared to version 2.5.11]
* gpg: New options --[no-]auto-key-upload. [T7333]
* gpg: Keys send to an LDAP server are now first updated from that server. New keyserver option "no-update-before-send" to disable this feature. [T7730]
* gpg: Disable default compression for 7z compressed input. [rG53252628de]
* gpg: Fix a regression with composite PQC and ECC algos. [T7649]
* gpg: Fix the list of possible algos for --edit-key:addkey. [T7788]
* gpg: Allow to select the Kyber variants with --edit-key:addkey. [T7792]
* gpg: Avoid a second Pinentry pop-up for a configured ADSK during key generation. [T7491]
* gpg: Change the ADSK key binding time to use the current time. [T6882]
* gpgsm: Add option --no-qes-note and new trustlist flag "noconsent". [T7713]
* agent: Enable "relax" in the trustlist by default and add flag "norelax". [rG7b133027ae]
* agent: Fix a crash on Windows in the Putty support. [T7799]
* dirmgr: Support LDAP servers using a schema like the Windows LDS servers. [T7742]
* scd:openpgp: Support Yubikey attestation generation. [rG5ddfedf24a]
* gpgtar: Fix regression in end-of-archive detection. [T7757]
Release-info: https://dev.gnupg.org/T7756
Gpg4winの新しいベータ版はまだ出てない
Noteworthy changes in version 2.5.12 (2025-09-02)
=================================================
[compared to version 2.5.11]
* gpg: New options --[no-]auto-key-upload. [T7333]
* gpg: Keys send to an LDAP server are now first updated from that server. New keyserver option "no-update-before-send" to disable this feature. [T7730]
* gpg: Disable default compression for 7z compressed input. [rG53252628de]
* gpg: Fix a regression with composite PQC and ECC algos. [T7649]
* gpg: Fix the list of possible algos for --edit-key:addkey. [T7788]
* gpg: Allow to select the Kyber variants with --edit-key:addkey. [T7792]
* gpg: Avoid a second Pinentry pop-up for a configured ADSK during key generation. [T7491]
* gpg: Change the ADSK key binding time to use the current time. [T6882]
* gpgsm: Add option --no-qes-note and new trustlist flag "noconsent". [T7713]
* agent: Enable "relax" in the trustlist by default and add flag "norelax". [rG7b133027ae]
* agent: Fix a crash on Windows in the Putty support. [T7799]
* dirmgr: Support LDAP servers using a schema like the Windows LDS servers. [T7742]
* scd:openpgp: Support Yubikey attestation generation. [rG5ddfedf24a]
* gpgtar: Fix regression in end-of-archive detection. [T7757]
Release-info: https://dev.gnupg.org/T7756
2025/09/06(土) 12:57:53.01
2025/10/22(水) 23:29:33.55
GnuPG 2.5.13
Noteworthy changes in version 2.5.13 (2025-10-22)
=================================================
[compared to version 2.5.12]
* gpg: Fix de-vs compliance with OCB and additional password. [T7804]
* gpg: Detect duplicate keys with --add-recipients. [T1825]
* gpg: Take care about the prefix for cv25519 encryption. [T7649]
* gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. [rGdb9705ef59]
* gpg: Error out on unverified output for non-detached signatures. [rG8abc320f2a]
* gpgsm: Use KEM interface for en- and decryption. [T7811,T7845]
* gpgsm: Fix delete and store certificate locking glitches. [T7855]
* gpg,gpgsm: Run keybox compression only when there are no other users. [T7855]
* gpg,gpgsm: Improve keybox closing and locking order on read and write. [T7855]
* gpg,gpgsm: Always use share mode read-write for the keybox file access. [T7829]
* scd:openpgp: Fix an oddity in changing the PIN. [T7840]
* dirmngr: New LDAP keyserver flag "upload". [T7866]
* agent: Retry private key deletion in case of sharing violations for up to 400ms. [T7863]
* Take care of a possible race on daemon startup under Windows. [T7829]
* Improve file renaming on Windows in case of a sharing violation error. [T7829]
Release-info: https://dev.gnupg.org/T7801
Noteworthy changes in version 2.5.13 (2025-10-22)
=================================================
[compared to version 2.5.12]
* gpg: Fix de-vs compliance with OCB and additional password. [T7804]
* gpg: Detect duplicate keys with --add-recipients. [T1825]
* gpg: Take care about the prefix for cv25519 encryption. [T7649]
* gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. [rGdb9705ef59]
* gpg: Error out on unverified output for non-detached signatures. [rG8abc320f2a]
* gpgsm: Use KEM interface for en- and decryption. [T7811,T7845]
* gpgsm: Fix delete and store certificate locking glitches. [T7855]
* gpg,gpgsm: Run keybox compression only when there are no other users. [T7855]
* gpg,gpgsm: Improve keybox closing and locking order on read and write. [T7855]
* gpg,gpgsm: Always use share mode read-write for the keybox file access. [T7829]
* scd:openpgp: Fix an oddity in changing the PIN. [T7840]
* dirmngr: New LDAP keyserver flag "upload". [T7866]
* agent: Retry private key deletion in case of sharing violations for up to 400ms. [T7863]
* Take care of a possible race on daemon startup under Windows. [T7829]
* Improve file renaming on Windows in case of a sharing violation error. [T7829]
Release-info: https://dev.gnupg.org/T7801
2025/10/22(水) 23:30:37.08
レスを投稿する
ニュース
- 【高市関税ｷﾀｰ!!】個人輸入・少額輸入品への税優遇見直しへ…中国の通販サイトなどからの大量輸入を懸念 [１ゲットロボ★]
- たぬかな、結婚していた SNSで報告 生配信では入籍時期も説明 祝福殺到「おめでとう！」「幸あれ」 [muffin★]
- 自民 国会議員の歳費 月額5万円引き上げ 今国会での成立目指す [どどん★]
- 「クラウンに乗りたかった」東京・足立の車暴走 男性、容疑を否認★2 [七波羅探題★]
- 「車を処分してください」生活保護の窓口 取材で見えた利用者の実情 [少考さん★]
- 東京・足立区の盗難車死亡ひき逃げ事件 11人死傷のうち死亡した男女の身元を発表 80代の男性と20代フィリピン国籍の女性 警視庁 [どどん★]
- Yahooニュースの高市批判記事にヤフコメ民殺到。怒涛の援護へ [268718286]
- 俺「膣ぎゅってしてみて？」 女「んっ...」 俺「もっともっと」
- 自民党閣僚関係者「党内外問わず高市総理に批判的なことを言える空気ではない」 [834922174]
- 【動画】慶應准教授の有野氏、高市答弁の問題点を理路整然と指摘しまいネトウヨ発狂wwwwwwwwwwww [271912485]
- タバコと酒は何がいいんや？
- (´･ω･`)ぴぃちゃんおいで