gnupg2 (2.4.4-2ubuntu23.2) plucky-security; urgency=medium

  * SECURITY UPDATE: Remote Code Execution
    - debian/patches/CVE-2025-68973.patch: gpg: Fix possible memory
    corruption in the armor parser.
    - CVE-2025-68973

 -- Allen Huang <allen.huang@canonical.com>  Mon, 05 Jan 2026 21:48:13 +0000

gnupg2 (2.4.4-2ubuntu23.1) plucky-security; urgency=medium

  * debian/patches/fix-key-validity-regression-due-to-CVE-2025-
    30258.patch:
    - Fix a key validity regression following patches for CVE-2025-30258,
      causing trusted "certify-only" primary keys to be ignored when checking
      signature on user IDs and computing key validity. This regression makes
      imported keys signed by a trusted "certify-only" key have an unknown
      validity (LP: #2114775).

 -- dcpi <dcpi@u22vm>  Thu, 26 Jun 2025 18:13:59 +0000

gnupg2 (2.4.4-2ubuntu23) plucky; urgency=medium

  * SECURITY UPDATE: verification DoS via crafted subkey data
    - debian/patches/CVE-2025-30258-1.patch: lookup key for merging/
      inserting only by primary key in g10/getkey.c, g10/import.c,
      g10/keydb.h.
    - debian/patches/CVE-2025-30258-2.patch: remove a signature check
      function wrapper in g10/mainproc.c, g10/packet.h, g10/sig-check.c.
    - debian/patches/CVE-2025-30258-3.patch: fix a verification DoS due to
      a malicious subkey in the keyring in g10/getkey.c, g10/gpg.h,
      g10/keydb.h, g10/mainproc.c, g10/packet.h, g10/sig-check.c.
    - debian/patches/CVE-2025-30258-4.patch: fix regression for the recent
      malicious subkey DoS fix in g10/getkey.c, g10/packet.h.
    - debian/patches/CVE-2025-30258-5.patch: fix double free of internal
      data in g10/sig-check.c.
    - CVE-2025-30258

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 28 Mar 2025 11:23:49 -0400

gnupg2 (2.4.4-2ubuntu22) plucky; urgency=medium

  * Don't build the gpgv-win32 package which only debian-installer uses

 -- Adrien Nader <adrien.nader@canonical.com>  Fri, 10 Jan 2025 14:24:01 +0100

gnupg2 (2.4.4-2ubuntu21) plucky; urgency=medium

  * revert-rfc4880bis.patch: Revert the "LibrePGP" changes that introduce
    the standards-incompatible v5 keyformat and others by default.

 -- Julian Andres Klode <juliank@ubuntu.com>  Wed, 04 Dec 2024 10:25:09 +0100

gnupg2 (2.4.4-2ubuntu20) plucky; urgency=medium

  * debian/patches/fix-disable-exec-ftbfs.patch: Fix FTBFS on amd64 by
    dropping this previous patch which appears to not be needed anymore.
  * debian/patches/fix-return-in-void-function.patch: Add minimal patch to
    remove erroneous return statement in g10/photid.c which results in
    FTBFS due to -Wreturn-mismatch (LP: #2090843)

 -- Alex Murray <alex.murray@canonical.com>  Tue, 03 Dec 2024 10:40:26 +1030

gnupg2 (2.4.4-2ubuntu19) plucky; urgency=medium

  * Rebuild against latest libassuan

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 21 Nov 2024 10:40:56 -0500

gnupg2 (2.4.4-2ubuntu18) oracular; urgency=medium

  * debian/patches/fix-disable-exec-ftbfs.patch: Fix FTBFS. Minor fix when
    building with --disable-exec. Also remove get_max_fds() from
    exechelp-w32.c since this function definition is already part of
    gpg-error.h

 -- Nishit Majithia <nishit.majithia@canonical.com>  Thu, 22 Aug 2024 12:28:14 +0530

gnupg2 (2.4.4-2ubuntu17) noble; urgency=medium

  * No-change rebuild against libnpth0t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 06 Apr 2024 16:25:03 +0000

gnupg2 (2.4.4-2ubuntu16) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 00:07:54 +0000

gnupg2 (2.4.4-2ubuntu15) noble; urgency=medium

  * Also drop build dependency on libcurl4-gnutls-dev.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Mar 2024 10:32:56 +0100

gnupg2 (2.4.4-2ubuntu13) noble; urgency=medium

  * Old drop build dependency on ghostscript, only used in maintainer mode.
  * Rebuild with gnutls28 t64 packages.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 06 Mar 2024 09:31:32 +0100

gnupg2 (2.4.4-2ubuntu11) noble; urgency=medium

  * Drop imagemagick & transfig build dependency,
    only used in maintainer mode.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 05 Mar 2024 10:39:06 +0100

gnupg2 (2.4.4-2ubuntu9) noble; urgency=medium

  * d/p/no-keyboxd.patch: Do not use keyboxd by default
  * gpg{,sm}: Recommend gpg-agent, dirmngr; suggest keyboxd

 -- Julian Andres Klode <juliank@ubuntu.com>  Fri, 01 Mar 2024 09:25:55 +0100

gnupg2 (2.4.4-2ubuntu8) noble; urgency=medium

  * Regenerate status-codes.h and reenable --assert-pubkey_algo (LP: #2055193)

 -- Julian Andres Klode <juliank@ubuntu.com>  Wed, 28 Feb 2024 13:35:53 +0100

gnupg2 (2.4.4-2ubuntu7) noble; urgency=medium

  * Fix a typo: Syntax error in Recommends: gpg-wks-client

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 22 Feb 2024 19:36:17 +0100

gnupg2 (2.4.4-2ubuntu6) noble; urgency=medium

  * Demote gpg-wks-client to Recommends instead

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 22 Feb 2024 19:19:54 +0100

gnupg2 (2.4.4-2ubuntu5) noble; urgency=medium

  * Do not depend on gpg-wks-client on i386

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 22 Feb 2024 19:06:44 +0100

gnupg2 (2.4.4-2ubuntu4) noble; urgency=medium

  * Stop building gpg-wks-server, gpg-wks-client on i386

 -- Julian Andres Klode <juliank@ubuntu.com>  Wed, 21 Feb 2024 16:22:49 +0100

gnupg2 (2.4.4-2ubuntu3) noble; urgency=medium

  * debian/migrate-pubring-from-classic-gpg: Add 2.4 to allowlist
  * d/tests/simple-tests: Use RSA keys for now.
    'default' key type does not work in batch mode anymore due to needing two
    subkeys (ed25519 for signing, and cv25519 for encryption).
  * gnupg: Demote gpg-wks-server to Suggests.
    We don't want this installed by default, it pulls in an mta, and we don't
    host wks servers by default.
  * gnupg: Demote gnupg-l10n to Recommends.
    Translations are nice, but I want to be able to remove them on
    an English system without breaking Depends.
  * Demote all Recommends: gnupg to Suggests.
    If we selectively install a specific part of gpg it should not
    by default pull in the entire suite again.

 -- Julian Andres Klode <juliank@ubuntu.com>  Fri, 16 Feb 2024 11:03:09 +0100

gnupg2 (2.4.4-2ubuntu2) noble; urgency=medium

  * Disable add-option-assert-pubkey_algo.patch for now

 -- Julian Andres Klode <juliank@ubuntu.com>  Tue, 13 Feb 2024 12:08:30 +0100

gnupg2 (2.4.4-2ubuntu1) noble; urgency=medium

  * Merge with Debian experimental. Remaining changes:
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
    - Drop the gpgv-win32 test
  * The dirmngr change now patches debian/dirmngr.user.service directly
  * Import upstream patch gpg: Add option --assert-pubkey_algo

 -- Julian Andres Klode <juliank@ubuntu.com>  Tue, 13 Feb 2024 10:44:42 +0100

gnupg2 (2.4.4-2) experimental; urgency=low

  * Fix binary-all FTBFS by running a regular build for arch-all builds.
    Otherwise the test suite was run against /usr/bin/gpg for
    binary-all builds and failed if it was missing.
  * Drop now unused (gpgcompose was removed upstream) build with
    --enable-maintainer-mode.
  * Speed up indep build by only running needed dh_auto_configure instances.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 28 Jan 2024 09:02:36 +0100

gnupg2 (2.4.4-1) experimental; urgency=low

  * Team upload.
  * Drop transitional gpgv2 package (requested in #873186) and update CI
    test dependencies. Also remove Breaks/Replaces against ancient
    (pre-buster) versions of gpgv2.
  * Drop Breaks/Replaces against ancient versions of gnupg/gnupg2.
  * Delete keyboxd's Breaks/Replaces against gnupg2 - They are not needed.
  * Update CI test dependencies (gnupg2 --> gnupg).
  * New upstream version.
    + Drop from-master/keep-the-status-output.patch, unfuzz
      Use-hkps-keys.openpgp.org-as-the-default-keyserver.patch.
    + Update gnutls b-d version requirement.
    + Update debian/copyright.
    + spelling-fixes.diff: Fix errors found by lintian.
  * Fixup recommends of architecture-any packages on architecture-all package
    "gnupg" to use (= ${source:Version}) instead of binary:Version. (Thanks,
    James McCoy) Closes: #1060366
  * Set --with-mailprog=/usr/sbin/sendmail and add a dependency on
    default-mta | mail-transport-agent to gpg-wks-server. Closes: #1025782
  * Run wrap-and-sort -ast.

 -- Andreas Metzler <ametzler@debian.org>  Sat, 27 Jan 2024 13:44:25 +0100

gnupg2 (2.4.3-2) experimental; urgency=low

  * Duplicate lintian override for embedded-library in gpgv-static in old
    lintian syntax to avoid auto-reject.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 24 Sep 2023 19:09:42 +0200

gnupg2 (2.4.3-1) experimental; urgency=low

  [ Andreas Metzler ]
  * Team upload.
  * New upstream version.
    + Update patch-queue.
    + Ship /usr/lib/gnupg/gpg-auth in scdaemon package.
    + Tighten b-d as required.
    + gpg-zip script dropped, bugreport therefore irrelevant. Closes: #913060
    + Also drop unused debian/gpg-zip.1.
    + systemd user unit examples dropped upstream (2.4.1).
  * Merge changes from stable uploads after 2.2.27-2.
  * Drop unused b-d on libcurl4-gnutls-dev. (See #980768, the other to be
    removed b-ds could be necessary if at some point the respective doc
    sources were patched in the Debian package.)
  * Drop autopkgtests explicit dependency on essential package diffutils.
    Closes: #953570
  * Support the noudeb build profile. (Closes: #1024921) (Thanks, Helmut
    Grohne)
  * Drop dirmngr dependency on lsb-base. (Empty transitional package
    depending on essential package)
  * Drop unused lintian overrides for gpg-wks-client.1.
  * Run wrap-and-sort -ast.

  [ Bastien Roucariès ]
  * Improve systemd integration for gpg-agent SSH emulation.

  [ NIIBE Yutaka ]
  * Fix debian/gpg-agent.install (not including keyboxd).
  * Update debian/patches/series for gpg-agent-idling.
  * Add gpg-agent-idling patch set from upstream (delete old implimatation).
  * Update debian/patches/series for three patches of the following.
  * Recover the behavior of BEGIN_ENCRYPTION status output.
    - from-master/keep-the-status-output.patch: New.
  * debian/control (keyboxd): New package.
  * Add keybox systemd support.
    - Add debian/keyboxd.user.service.
    - Add debian/keyboxd.user.socket.
    - debian-packaging/keyboxd-systemd-support.patch: New.
    - debian/keyboxd.8: New.
    - debian/keyboxd.README.Debian: New.
    - debian/keyboxd.install: New.
    - debian/keyboxd.manpages: New.
  * Recover systemd-user support.
    - Add debian/*.user.service.
    - Add debian/*.user.socket.
    - debian/rules (override_dh_installsystemduser): New.
    - debian-packaging/keep-systemd-support.patch: New.

 -- Andreas Metzler <ametzler@debian.org>  Sun, 24 Sep 2023 14:44:27 +0200

gnupg2 (2.3.1-1) experimental; urgency=medium

  * Upload to experimental
  * New upstream version 2.3.1

 -- Christoph Biedl <debian.axhn@manchmal.in-ulm.de>  Tue, 04 May 2021 21:44:48 +0200

gnupg2 (2.2.40-1.1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 28 Mar 2023 08:39:57 +0200

gnupg2 (2.2.40-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * In migration CI test skip debian-archive-bookworm-stable.gpg (and
    aggregated keyring), gpg1 cannot read the ed25519 key. Closes: #1033155

 -- Andreas Metzler <ametzler@debian.org>  Sun, 26 Mar 2023 15:03:05 +0200

gnupg2 (2.2.40-1ubuntu2) lunar; urgency=medium

  * No-change rebuild against libldap-2

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 15 Dec 2022 19:48:12 +0000

gnupg2 (2.2.40-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 04 Nov 2022 19:58:52 +0100

gnupg2 (2.2.40-1) unstable; urgency=medium

  * new upstream version
  * refresh patches
  * import post-release cleanup patches from upstream
  * drop stale NEWS files for dirmngr and gpg-agent

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 19 Oct 2022 11:09:42 -0400

gnupg2 (2.2.39-1) unstable; urgency=medium

  * refresh upstream signing keys from g10/distsigkey.gpg
  * add additional lintian override for version of lintian used on
    ftp-master

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Tue, 06 Sep 2022 16:47:57 -0400

gnupg2 (2.2.38-1) unstable; urgency=medium

  * new upstream version
  * refresh patches (dropping those already upstream)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 01 Sep 2022 18:25:24 -0400

gnupg2 (2.2.35-3ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.
  * Dropped changes, included upstream:
    - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
      NOTATION_DATA in g10/cpr.c.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 15 Aug 2022 18:01:56 -0700

gnupg2 (2.2.35-3) unstable; urgency=high

  * fix security error from large notations (Thanks, Demi Marie Obenour)
    (Closes: #1014157)
  * Standards-Version: bump to 4.6.1 (no changes needed)
  * clean up lintian-overrides

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 01 Jul 2022 02:01:17 -0400

gnupg2 (2.2.35-2) unstable; urgency=medium

  * Only enable wine32 test on i386

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 29 Apr 2022 16:53:05 -0400

gnupg2 (2.2.35-1) unstable; urgency=medium

  * New upstream release.
  * refresh patches.
  * Correct handling of 256-bit Ed25519 secret keys (Closes: #1010171).
  * Building for Windows requires libgpg-error 1.45

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 27 Apr 2022 17:09:01 -0400

gnupg2 (2.2.34-1) unstable; urgency=medium

  * New upstream release
  * Refresh patches.
  * ship gpg-check-pattern.1 from upstream
  * override another pedantic lintian warning

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 22 Apr 2022 18:43:25 -0400

gnupg2 (2.2.27-4) unstable; urgency=medium

  [ Christoph Biedl ]
  * Remove myself from uploaders

  [ Daniel Kahn Gillmor ]
  * Replace Werner Koch's signing key
  * convert to DEP-14 branch name
  * standards-version: bump to 4.6.0 (no changes needed)
  * add upstream metadata
  * gpgv-static: fix up lintian-override
  * d/copyright: update years

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 20 Apr 2022 19:03:29 -0400

gnupg2 (2.2.27-3ubuntu3) kinetic; urgency=medium

  * SECURITY UPDATE: signature forgery via injection into the status line
    - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
      NOTATION_DATA in g10/cpr.c.
    - CVE-2022-34903

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 04 Jul 2022 12:17:43 -0400

gnupg2 (2.2.27-3ubuntu2) jammy; urgency=medium

  * No-change rebuild for ppc64el baseline bump.

 -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Wed, 23 Mar 2022 14:55:24 +0100

gnupg2 (2.2.27-3ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 29 Dec 2021 15:59:57 -0800

gnupg2 (2.2.27-3) unstable; urgency=medium

  * Avoid network interaction in generator. Closes: #993578
  * Remove build dependency on librsvg2-bin. Closes: #993857
  * Backport "Scd: Fix CCID driver for SCM SPR332/SPR532".
    Closes: #982546
  * Update watch file: Sticking to the 2.2 series for the time being

 -- Christoph Biedl <debian.axhn@manchmal.in-ulm.de>  Sat, 18 Dec 2021 14:04:20 +0100

gnupg2 (2.2.27-2ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.
  * Dropped changes, included upstream:
    - d/p/dirmngr-handle-EAFNOSUPPORT-at-connect_server.patch:
      Fix IPv6 connectivity for dirmngr.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 01 Nov 2021 11:19:52 -0700

gnupg2 (2.2.27-2) unstable; urgency=medium

  * Add a NEWS entry about the end of support for ~/.gnupg/options.
    Closes: #985158

 -- Christoph Biedl <debian.axhn@manchmal.in-ulm.de>  Thu, 22 Apr 2021 20:40:36 +0200

gnupg2 (2.2.27-1) unstable; urgency=medium

  [ NIIBE Yutaka ]
  * New upstream release.

  [ Christoph Biedl ]
  * Tighten libgcrypt and libksba dependency

  [ Daniel Kahn Gillmor ]
  * change debian packaging branch name to debian/main
  * refresh patches using gbp pq
  * point to upstream commit used to improve spawning reliability
  * Refresh 3072-bit default patch
  * standards-version: bump to 4.5.1 (no changes needed)
  * dh: bump to dh 13
  * clean up lintian overrides
  * fully drop symcryptrun

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 08 Feb 2021 17:57:00 -0500

gnupg2 (2.2.26-1) UNRELEASED; urgency=medium

  [ Jeremiah C. Foster ]
  * debian/scdaemon.udev: Add an entry for Librem Key.

  [ NIIBE Yutaka ]
  * New upstream release.
  * refresh patches.
  * debian/rules: Add build for regexp.
  * debian/gnupg-utils.install: Remove /usr/bin/symcryptrun.
    Fix for gpgsplit, which is changed in upstream from 'noinst'.
  * debian/patches/gpg-change-agent-spawn-2019-07-24-v2.patch: New patch to
    fix a race condition, backported from master (Closes: #868550, #972525).
  * debian/scdaemon.udev: Add a generic entry for "Gnuk Token" and another
    for GnuPG e.V.
  * org.gnupg.scdaemon.metainfo.xml: Add an entry for GnuPG e.V.

 -- NIIBE Yutaka <gniibe@fsij.org>  Thu, 07 Jan 2021 09:07:21 +0900

gnupg2 (2.2.20-1ubuntu4) impish; urgency=medium

  * No-change rebuild due to OpenLDAP soname bump.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Mon, 21 Jun 2021 17:48:27 -0400

gnupg2 (2.2.20-1ubuntu3) hirsute; urgency=medium

  * No-change rebuild to drop the udeb package.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 22 Feb 2021 10:33:34 +0100

gnupg2 (2.2.20-1ubuntu2) hirsute; urgency=medium

  * d/p/dirmngr-handle-EAFNOSUPPORT-at-connect_server.patch:
    - Fix IPv6 connectivity for dirmngr (LP: #1910432)

 -- Heitor Alves de Siqueira <halves@canonical.com>  Sat, 16 Jan 2021 14:53:14 +0000

gnupg2 (2.2.20-1ubuntu1) groovy; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.
    - Don't declare diffutils as a test dependency, this package is
      essential so always installed; and the dependency declaration breaks
      cross-arch testing.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 01 May 2020 14:58:28 -0700

gnupg2 (2.2.20-1) unstable; urgency=medium

  * New upstream release
  * refresh patches

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 23 Mar 2020 15:05:13 -0400

gnupg2 (2.2.19-3ubuntu2) focal; urgency=medium

  * Don't declare diffutils as a test dependency, this package is essential
    so always installed; and the dependency declaration breaks
    cross-arch testing.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Tue, 10 Mar 2020 11:50:46 -0700

gnupg2 (2.2.19-3ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 10 Mar 2020 10:59:47 +0100

gnupg2 (2.2.19-3) unstable; urgency=medium

  * d/copyright update years
  * Avoid errors in systemd environment generator (Closes: #950836)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 09 Mar 2020 14:27:42 -0400

gnupg2 (2.2.19-2) unstable; urgency=medium

  * clarify that keys.openpgp.org is a debian-specific
    choice for default keyserver
  * Standards-version: bump to 4.5.0 (no changes needed)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 27 Feb 2020 17:35:36 -0500

gnupg2 (2.2.19-1) unstable; urgency=medium

  * New upstream release

  [ Roger Shimizu ]
  * d/control: Update Build-Depends: libgpg-error-dev (>= 1.35)

  [ Daniel Kahn Gillmor ]
  * clean up unnecessary whitespace
  * Ship identifiers for Librem Key (Closes: #932474)
  * drop extra systemd user service links (Closes: #931954)
  * update signing key for Werner
  * fixup patch
  * drop patches already upstream
  * refresh patches
  * cherry-pick fix from upstream
  * dirmngr-idling: add some commentary about dns housekeeping
  * bump standards-version to 4.4.1 (no changes needed)
  * sort scdaemon metainfo.xml modalias
  * announce librem key in scdaemon metainfo.xml
  * add lintian overrides for executables shipped by upstream in /usr/lib/gnupg/

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 08 Jan 2020 10:33:12 -0500

gnupg2 (2.2.17-3ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop the gpgv-win32 test
    - Honor http_proxy= environment variables by default in the systemd
      user session dirmngr service.
      (debian/patches/dirmngr-honor-http-proxy.patch)
    - Export GPG_AGENT_INFO in the systemd-environment-generator too.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 20 Nov 2019 16:26:23 +0000

gnupg2 (2.2.17-3) unstable; urgency=medium

  * avoid data loss when using keyservers (see https://dev.gnupg.org/T4628)
  * avoid O(N^2) operations when listing certificates with many sigs
  * d/tests/gpgv-win32: make more robust
  * avoid system CAs for HKPS pool
  * build-depend on gpgrt-tools for yat2m

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Tue, 16 Jul 2019 20:20:39 -0400

gnupg2 (2.2.17-2) unstable; urgency=medium

  * d/tests/gpgv-win32: depend directly on wine32 (Closes: #905563)
  * d/tests/gpgv-win32: by default pinentry-mode loopback is allowed upstream
  * migrate-pubring-from-classic-gpg: make more robust (Closes: #931385)
  * migrate-pubring-from-classic-gpg: always pass --homedir and --batch
  * added test of migration script

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Sat, 13 Jul 2019 21:36:24 -0400

gnupg2 (2.2.17-1) unstable; urgency=medium

  * New upstream release
  * upload to unstable, since buster is released

  [ kwadronaut ]
  * Specify what new and old keyrings are in migration script

  [ Daniel Kahn Gillmor ]
  * drop unnecessary patches, including broken patch for printing
    revocation certificates
  * use DEP-14 for debian/master
  * refresh and reorganize patches
  * only use Kristian's CA for the SKS HKPS pool
  * switch to hkps://keys.openpgp.org as the default keyserver
  * added NEWS entry about move to keys.openpgp.org
  * Standards-Version: bump to 4.4.0 (no changes needed)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 11 Jul 2019 22:09:21 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog gpgv-static`.
