gnupg, branch bugfixes-2.2

common: Fix read buffer over-read in uncompress_ecc_q_in_canon_sexp.

2025-06-11T12:45:16Z

* common/sexputil.c (uncompress_ecc_q_in_canon_sexp): Only call memcmp if the lengths are equal. -- GnuPG-bug-id: 7662 Signed-off-by: Collin Funk

gpg: Fully implement the group key flag.

2025-05-12T10:00:30Z

* g10/getkey.c (merge_selfsigs_main): Do not mask out the group bit. (merge_selfsigs_subkey): Ditto/ * g10/keygen.c (ask_key_flags_with_mask): Ditto. (proc_parameter_file): Ditto. -- Updates-commit: 202ed9e281d5fb95f166faeb6741c75872be464c

Update distsigkey

2025-05-09T14:48:42Z

-- Added Alexander. Removed Andre.

scd:p15: Make signing work for Nexus cards.

2025-05-06T09:01:49Z

* scd/app-p15.c (CARD_PRODUCT_NEXUS): New. (read_p15_info): Detect Nexus cards. (get_dispserialno): Use product_id instead of comparing the manufacturer_id. (do_sign): Handle Nexus like BELPIC. (cherry picked from commit b83d86b988bbb05b25dba250a5f01b33b3dbb824)

Fix access to the bintoasc mapping in the libksba support.

2025-04-30T08:42:08Z

* common/ksba-io-support.c (has_only_base64): Use memchr since calling strchr on a non-NUL terminated string is undefined behavior. -- Signed-off-by: Collin Funk This patch has been stripped from Colin's original patch because this is not just about a warning but an actual bug. That bug was introduced in 2003 by me. - wk

scd:p15: Accept P15 cards with a zero-length label.

2025-04-24T09:28:27Z

* scd/app-p15.c (read_ef_tokeninfo): Allow for a zero length label. -- Some versions of the CardOS personalisation software seem to store a missing labels as zero-length object instead of not storing the object at all. Due to a lack of such a card this patch has not been tested.

Post release updates

2025-04-09T09:28:17Z

Release 2.2.47

2025-04-09T09:02:12Z

gpgconf: Show also stuff from the Registry emulation.

2025-04-09T08:56:09Z

* tools/gpgconf.c (my_read_reg_string): New. Use it for the registry listing stuff. (show_registry_entries_from_file): Use also on Unix.

speedo: Require the use of an installed gpg-authcode-sign.sh

2025-04-02T10:10:08Z

* build-aux/speedo.mk: Change to use the external sign script.