Debian Package Tracker

general

source: gnupg2 (main)
version: 2.2.17-3
maintainer: Debian GnuPG Maintainers (archive) (DMD)
uploaders: Eric Dorland [DMD] – Daniel Kahn Gillmor [DMD]
arch: all any
std-ver: 4.4.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.26-6+deb8u2
o-o-sec: 2.0.26-6+deb8u2
oldstable: 2.1.18-8~deb9u4
old-sec: 2.1.18-8~deb9u2
old-bpo: 2.2.12-1~bpo9+1
old-bpo-sl: 2.2.17-3~bpo9+2
stable: 2.2.12-1
stable-bpo: 2.2.17-3~bpo10+2
testing: 2.2.17-3
unstable: 2.2.17-3

versioned links

2.0.26-6+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.18-8~deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.18-8~deb9u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.12-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.12-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.17-3~bpo9+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.17-3~bpo10+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.17-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

dirmngr (10 bugs: 0, 6, 4, 0)
gnupg (96 bugs: 0, 68, 28, 0)
gnupg-agent (50 bugs: 0, 40, 10, 0)
gnupg-l10n
gnupg-utils
gnupg2 (45 bugs: 0, 30, 15, 0)
gpg (9 bugs: 0, 8, 1, 0)
gpg-agent (3 bugs: 0, 3, 0, 0)
gpg-wks-client
gpg-wks-server
gpgconf
gpgsm (9 bugs: 0, 9, 0, 0)
gpgv (3 bugs: 0, 3, 0, 0)
gpgv-static
gpgv-udeb
gpgv-win32
gpgv2
scdaemon (9 bugs: 0, 9, 0, 0)

action needed

1 bug tagged help in the BTS normal

The BTS contains 1 bug tagged help, please consider helping the maintainer in dealing with it.

Created: 2019-03-21 Last update: 2019-08-24 15:45

Depends on packages which need a new maintainer normal

The packages that gnupg2 depends on which need a new maintainer are:

xloadimage (#919265)
- Suggests: xloadimage

Created: 2019-01-14 Last update: 2019-08-24 14:01

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-07-19 Last update: 2019-08-24 11:34

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-24 Last update: 2019-08-24 02:14

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 1545fca5dd93328a9c37a6e164f4557a89f27b2d
Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date:   Thu Aug 8 09:09:35 2019 -0400

    Ship identifiers for Librem Key (Closes: #932474)
    
    Thanks to Jeremiah Foster for sorting this out!

commit 7a485a8d60a23e7ede54b19a008cd45aa3c89a12
Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date:   Sun Jul 21 16:02:18 2019 -0400

    clean up unnecessary whitespace

Created: 2019-08-08 Last update: 2019-08-17 09:44

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2018-1000858: GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.
CVE-2018-9234: GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

Please fix them.

Created: 2018-04-05 Last update: 2019-07-22 14:35

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-9234: GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

Please fix it.

Created: 2018-04-05 Last update: 2019-07-22 14:35

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

news

[rss feed]

[2019-08-08] Accepted gnupg2 2.2.17-3~bpo9+2 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Roger Shimizu)
[2019-08-06] Accepted gnupg2 2.2.17-3~bpo10+2 (source) into buster-backports (Roger Shimizu)
[2019-07-28] Accepted gnupg2 2.2.17-3~bpo10+1 (source amd64 all) into buster-backports, buster-backports (Roger Shimizu)
[2019-07-28] Accepted gnupg2 2.2.17-3~bpo9+1 (source amd64 all) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Roger Shimizu)
[2019-07-23] gnupg2 2.2.17-3 MIGRATED to testing (Debian testing watch)
[2019-07-17] Accepted gnupg2 2.2.17-3 (source) into unstable (Daniel Kahn Gillmor)
[2019-07-14] Accepted gnupg2 2.2.17-2 (source) into unstable (Daniel Kahn Gillmor)
[2019-07-13] gnupg2 2.2.13-2 MIGRATED to testing (Debian testing watch)
[2019-07-12] Accepted gnupg2 2.2.17-1 (source) into unstable (Daniel Kahn Gillmor)
[2019-06-18] Accepted gnupg2 2.2.16-2 (source) into experimental (Daniel Kahn Gillmor)
[2019-05-29] Accepted gnupg2 2.2.16-1 (source) into experimental (Daniel Kahn Gillmor)
[2019-05-14] Accepted gnupg2 2.2.13-2 (source) into unstable (Daniel Kahn Gillmor)
[2019-04-01] Accepted gnupg2 2.2.15-1 (source) into experimental (Daniel Kahn Gillmor)
[2019-03-20] Accepted gnupg2 2.2.14-1 (source) into experimental (Daniel Kahn Gillmor)
[2019-03-02] Accepted gnupg2 2.2.13-1 (source) into unstable (Daniel Kahn Gillmor)
[2019-02-09] Accepted gnupg2 2.1.18-8~deb9u4 (source) into proposed-updates->stable-new, proposed-updates (Daniel Kahn Gillmor)
[2019-01-03] Accepted gnupg2 2.2.12-1~bpo9+1 (source) into stretch-backports (Roger Shimizu)
[2018-12-20] gnupg2 2.2.12-1 MIGRATED to testing (Debian testing watch)
[2018-12-15] Accepted gnupg2 2.2.12-1 (source) into unstable (Daniel Kahn Gillmor)
[2018-11-21] gnupg2 2.2.11-1 MIGRATED to testing (Debian testing watch)
[2018-11-18] Accepted gnupg2 2.2.11-1 (source) into unstable (Daniel Kahn Gillmor)
[2018-11-02] Accepted gnupg2 2.1.18-8~deb9u3 (source) into proposed-updates->stable-new, proposed-updates (Daniel Kahn Gillmor)
[2018-10-13] Accepted gnupg2 2.2.10-3~bpo9+1 (source) into stretch-backports (Roger Shimizu)
[2018-10-11] gnupg2 2.2.10-3 MIGRATED to testing (Debian testing watch)
[2018-10-08] Accepted gnupg2 2.2.10-3 (source) into unstable (Daniel Kahn Gillmor)
[2018-10-04] Accepted gnupg2 2.2.10-2~bpo9+1 (source) into stretch-backports (Roger Shimizu)
[2018-10-03] gnupg2 2.2.10-2 MIGRATED to testing (Debian testing watch)
[2018-09-30] Accepted gnupg2 2.2.10-2 (source) into unstable (Daniel Kahn Gillmor)
[2018-09-06] Accepted gnupg2 2.2.10-1~bpo9+1 (source) into stretch-backports (Roger Shimizu)
[2018-09-02] gnupg2 2.2.10-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 231 242
RC: 0
I&N: 173 181
M&W: 55 58
F&P: 3
patch: 0
help: 1

links

homepage
lintian (0, 1)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.2.12-1ubuntu3
53 bugs (1 patch)
patches for 2.2.12-1ubuntu3