Release 2.2.55gnupg-2.2.55

2 files changed, 38 insertions, 5 deletions

diff --git a/NEWS b/NEWS
index a51f67290..da8c5d64c 100644
--- a/NEWS
+++ b/NEWS
@@ -1,13 +1,32 @@
-Noteworthy changes in version 2.2.55 (unreleased)
+Noteworthy changes in version 2.2.55 (2026-08-27)
 -------------------------------------------------
 
-  Release-info: https://dev.gnupg.org/T????
+  * gpg: New options --show-session-hash and --show-only-session-hash.
+    [rGfaa571fbff]
+
+  * gpg: Remove local secret key file after bkuptocard.  [T8312]
+
+  * gpg: Fix TOFU trust models to actually check UTK signatures.
+    [T8404]
+
+  * gpgsm: Fix possible double free in the CMS parser.  [T8240]
+
+  * gpgsm: Fix regression in gpgsm_verify with expired certificates.
+    [T8188]
+
+  * gpgsm: Only display de-vs compliance status in de-vs compliance
+    mode.  [T8333]
+
+  * gpgsm: Require a minimum tag length for GCM decryption.
+    [rGab2395daeb]
+
+  Release-info: https://dev.gnupg.org/T8419
 
 
 Noteworthy changes in version 2.2.54 (2026-04-20)
 -------------------------------------------------
 
-* gpg: Fix an edge case in --refresh-keys.  [T8197]
+  * gpg: Fix an edge case in --refresh-keys.  [T8197]
 
   * gpgsm: Add a certificate chain check for de-vs compliance.
     [T8188]
@@ -17,7 +36,7 @@ Noteworthy changes in version 2.2.54 (2026-04-20)
 
   * agent: Accept a trustlist with a missing LF at the end.  [T8078]
 
-  Release-info: https://dev.gnupg.org/T8170
+u  Release-info: https://dev.gnupg.org/T8170
 
 
 Noteworthy changes in version 2.2.53 (2026-03-12)
diff --git a/README b/README
index 53ca9aaa9..437ded6f9 100644
--- a/README
+++ b/README
@@ -4,7 +4,7 @@
 
           Copyright 1997-2019 Werner Koch
           Copyright 1998-2021 Free Software Foundation, Inc.
-          Copyright 2003-2025 g10 Code GmbH
+          Copyright 2003-2026 g10 Code GmbH
 
 
 * INTRODUCTION
@@ -149,6 +149,20 @@
 
 * RECOMMENDATIONS
 
+** Securing the global config files on Windows
+
+  The Windows version of GnuPG expects optional global config files in
+  the directory "%ALLUSERSPROFILE%\GNU\etc\gnupg".  However, current
+  Windows versions allow by default all users to write to this
+  directory.  Thus on machine shared with several users it is highly
+  suggested to secure the entire "etc" directory tree by disallowing
+  regular users to create files or diretories.  Installers for GnuPG
+  on Windows might have done that already but it is suggested to check
+  that this has been done.  Fixing the permissions is easy from an
+  Administrators terminal:
+
+    icacls "%ALLUSERSPROFILE%\GNU\etc" /setintegritylevel h
+
 ** Socket directory
 
   GnuPG uses Unix domain sockets to connect its components (on Windows