gnupg-2.2.33

[Bruce Dubbs]

New minor version.

[Xi Ruoyao]

​https://gnupg.org/ says the latest release is 2.2.32. It seems the entire 2.3.x series are development releases.

[Douglas R. Reno]

From the release email:

Three different series of GnuPG are actively maintained:

- Version 2.3 is the current stable version with a lot of new features
  compared to 2.2.  This announcement is about the latest release of
  this series.

- Version 2.2 is our LTS (long term support) version and guaranteed to
  be maintained at least until the end of 2024.
  See https://gnupg.org/download/index.html#end-of-life

- Version 1.4 is only maintained to allow decryption of very old data
  which is, for security reasons, not anymore possible with other GnuPG
  versions.

It says that it's the "current stable"

If we decide to stay with LTS, we really need to update to 2.2.32 (we currently have 2.2.29)

[Douglas R. Reno]

Let's stay with 2.2.x for now. Now 2.3.33

[Douglas R. Reno]

2.2.30

Noteworthy changes in version 2.2.30 (2021-08-26)
=================================================

  * gpg: Extended gpg-check-pattern to support accept rules,
    conjunctions, and case-sensitive matching.  [5ca15e58b2]

  * agent: New option --pinentry-formatted-passphrase.  [#5553]

  * agent: New option --check-sym-passphrase-pattern.  [#5517]

  * agent: Use the sysconfdir for the pattern files.  [5ed8e598fa]

  * agent: Add "checkpin" inquiry for use by pinentry.  [#5532]

  * wkd: Fix client issue with leading or trailing spaces in
    user-ids.  [576e429d41]

  * Pass XDG_SESSION_TYPE and QT_QPA_PLATFORM envvars to Pinentry.
    [#3659]

  * Under Windows use LOCAL_APPDATA for the socket directory.  [#5537]

  Release-info: https://dev.gnupg.org/T5519

2.2.31

Noteworthy changes in version 2.2.31 (2021-09-15)
=================================================

  * agent: Fix a regression in GET_PASSPHRASE.  [#5577]

  * scd: Fix an assertion failure in close_pcsc_reader.  [67e1834ad4]

  * scd: Add support for PC/SC in "GETINFO reader_list".

  Release-info: https://dev.gnupg.org/T5571

2.2.32

Noteworthy changes in version 2.2.32 (2021-10-06)
=================================================

* dirmngr: Fix Let's Encrypt certificate chain validation.  [T5639]
  (See https://dev/gnupg.org/T5639)

* dirmngr: New option --ignore-cert.  [323a20399d]

* gpg: Fix --list-packets for AEAD packets with unknown key.  [T5584]

Release-info: https://dev.gnupg.org/T5601

A Lets Encrypt fix!

2.2.33

Noteworthy changes in version 2.2.33 (2021-11-23)
=================================================

  * gpg: New option --min-rsa-length.  [rG6ee01c1d26]

  * gpg: New option --forbid-gen-key.  [rG985fb25c46]

  * gpg: New option --override-compliance-check.  [T5655]

  * gpgconf: New command --show-configs.  [rG8fe3f57643]

  * agent,dirmngr: New option --steal-socket.  [rG6507c6ab10]

  * scd: Improve the selection of the default PC/SC reader.  [T5644]

  * gpg: Fix printing of binary notations.  [T5667]

  * gpg: Remove stale ultimately trusted keys from the trustdb.  [T5685]

  * gpgsm: Detect circular chains in --list-chain.  [rGc9343bec83]

  * gpgconf: Create the local option file even if the global file
    exists.  [T5650]

  * dirmngr: Make reading resolv.conf more robust.  [T5657]

  * gpg-wks-server: Fix created file permissions.  [rGf54feb4470]

  * scd: Support longer data for ssh-agent authentication with openpgp
    cards.  [T5682]

  * Support gpgconf.ctl for NetBSD and Solaris.  [T5656,T5671]

  * Silence "Garbled console data" warning under Windows in most
    cases.

  * Silence warning about the rootdir under Unices w/o a mounted /proc
    file system.

  * Fix possible build problems about missing include files.  [T5592]

  * i18n: Replace the term "PIN-Cache" by "Passswort-Cache" in the
    German translation. [rgf453d52e53]

  * i18n: Update the Russian translation.

  Release-info: https://dev.gnupg.org/T5641

  The provided Windows installer is now build against Libgpg-error 1.43
  and thus features versatile meta options for the config file.  For
  example, it is possible to read and use option values from the
  Registry or from environment variables.  More on this is in a not
  published written blog article.

[Douglas R. Reno]

Fixed at 313f9a6ba8e6b6799e5d1e7b75186f118974e91e